Uncommon and Critical
summary
Survey of uncommon but critical software bugs that frequently appear not because of platform or language, but due to common coding mistakes; presents concrete examples of simple, interesting vulnerabilities beyond typical XSS, SQL injection, or clickjacking cases. Focus is on demonstrating these non-typical flaw patterns and how they arise in real code, rather than reviewing well-known attack classes or marketing solutions.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:11Zip-bomb threats
- 5:23ZIP-archive dangers
- 6:06Chatbot support vulnerabilities
- 11:56Exploiting via chatbots
- 13:53XSS in admin context
- 16:25Chatbot integration risks
- 17:38Access restriction flaws
- 19:08Host header vulnerability
- 20:14Bypassing checks via X-Forwarded-For
- 21:59Untrusted data dangers
- 22:23USB device vulnerabilities
- 24:15Python script injections
- 27:28JSON injection exploits
- 30:24Practical exploitation
- 31:32Q&A
related talks
33mSecurity is Broken: Understanding Common Vulnerabilities
23mSecure Code, Safe Future: Mastering Security in Critical Software Development
39m"Inter-application" vulnerabilities - hunting for bugs in..."
51mVulnerabilities Without CVEs: Governing the Dark Matter of Internal and Unknown Software
30mHidden Vulnerabilities in Open Source
34mHow To Find And Prevent Entire Classes Of Security Vulnerabilities
13mStandard Classification: Back to Basics: Looking for subtle bugs in beginne...
38mFinding Security Issues in Open Source