BBUGFLARE

Public library

Cybersecurity articles

Automated coverage from researcher feeds — text + code extraction, no thumbnails. Sort by recent, popular, or trending.

GitHub Advisories35
YOURLS has stored XSS in referrer statistics chart via crafted Referer header

### Summary YOURLS stores the HTTP `Referer` header for short URL redirects and later renders aggregated referrer domains in the per-link statistics page. An unauthenticated attacker can send a crafted `Referer` header to any existing short URL. When an authenticated administrator or stats-page v...

Read →

Prefer original Bugflare research? Browse writeups