Blog

Security research and writing by Jeremy Buis.

• 07 Jul 2021 » Exploiting Less.js to Achieve RCE
• 05 Jun 2020 » Elementor Page Builder 2.9.8 Stored XSS
• 27 Sep 2019 » JetBrains TeamCity Reflected XSS
• 19 Oct 2018 » ImageMagick RCE Take 2
• 10 Sep 2018 » Passwords Shouldn't Be Hard, Don't Cause Your Next Breach
• 01 Oct 2015 » The Rise of JavaScript XSS and Practical Mitigation Techniques
• 08 Jul 2015 » Setting Up a Secure Instance of Express JS (GitHub Repo)
• 27 May 2015 » Security Comparison: AngularJS vs Backbone.js vs Ember
• 08 Apr 2015 » Secure Your Express Application