Application Security

// Application Security

3 posts

Exploiting HTTP Parser Inconsistencies: ACL Bypasses, SSRF, and Cache Poisoning

A deep tour of HTTP parser inconsistencies: how trim/fold/header disagreements between Nginx, WAFs, caches and frameworks (Node.js, Flask, Spring Boot, PHP) enable…

oxfemale· Jul 28· 18 min ·278

Roundcube CVE-2025-49113: Authenticated PHP Object Deserialization to RCE in Open-Source Webmail

Application Security70

Application Security Vulnerability Analysis

Roundcube CVE-2025-49113: Authenticated PHP Object Deserialization to RCE in Open-Source Webmail

CVE-2025-49113 is a critical authenticated remote-code-execution flaw in Roundcube webmail — the default in cPanel, Plesk, and many hosting stacks — caused…

oxfemale· May 23· 10 min ·70

Essential iOS Hardening: A Practical Guide to Defending iPhones Against Modern Spyware

Application Security96

Application Security Cybersecurity

Essential iOS Hardening: A Practical Guide to Defending iPhones Against Modern Spyware

A practical, security-engineering view of the essential iOS hardening steps every iPhone user — and especially high-risk targets — should apply: Lockdown…

oxfemale· May 23· 8 min ·96