AuthZ
appsec.fyi
Windows AppResolver LPE: From AppContainer to SYSTEM. PoC linked to CVE-2026-50454
2026-07-18
Confused Deputy: Google IdP Universal Account Takeover via Device Code Flow Hijacking
2026-07-18
How I Found a Cross-Student IDOR in Academy LMS That Leaked Correct Quiz Answers
2026-07-18
Zero Credentials, Full Access: Inside a Complete Authorization Failure
2026-07-18
Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy
2026-07-18
More AuthZ →