Tyler the Pug

Shopify Takeovers No Longer Possible

1

### Nuclei Version: v9.8.1 ### Template file: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/takeovers/shopify-takeover.yaml ### Command to reproduce: Any ### Anything else: Shopify now requires domain ownership verification  As a result, this check can no...

Vercel Takeovers No Longer Possible

2

### Nuclei Version: v3.2.3 ### Template file: v9.8.1 ### Command to reproduce: Any  ### Anything else: Vercel now requires domain verification via TXT record so domain takeovers are no...

Hi, I updated Black to resolve [Regular Expression Denial of Service (ReDoS)](https://learn.snyk.io/lesson/redos/?loc=fix-pr) vulnerability. This required updating the formatting of a few files to pass linting since it would throw: ```...

Cross Site Scripting Vulnerability in SAML Auth Flow

3

In the saml2/login endpoint when using 3rd party SSO, the idp parameter is vulnerable to cross-site scripting injection due to insufficient input sanitization. Proof of Concept: Visit the URL endpoint...

Snyk fix f83e2319f63a812f2483f6c46f230f1a

2

Security Fix PR Snyk and manual analysis has created this pull request to fix 4 high-severity vulnerabilities found in the Dockerfile dependencies for this project. Keeping your Docker base image...

Snyk PR: Fix Vulnerable pip Dependencies Changes included in this PR: Updated requirements.txt to upgrade the following vulnerable dependencies to their fixed versions. Vulnerabilities that will be fixed By pinning:...