When Two Parsers Disagree: Exploiting Query String Differentials for XSSDiscover how differing query string parsers can be exploited for XSS, using examples and detailed explanations of parser behaviors in web security15 min read·blog.voorivex.team5Feb 10
Shaking the MCP Tree: A Security Deep DiveMCP server security trade-offs expose vulnerabilities in Dynamic Client Registration, leading to OAuth exploitation and direct server access14 min read·blog.voorivex.team3Feb 3
Cloudflare Image Proxy as a CSPT Gadget: A Cross-Origin CSPT ExploitExplore Cloudflare's Image Proxy as a CSPT exploit tool, enabling impactful cross-origin path traversal attacks through redirect techniques4 min read·blog.voorivex.team3Oct 19, 2025
CSS Data Exfiltration to Steal OAuth TokenUse CSS injection to bypass CSP, exfiltrate OAuth tokens through unique chaining techniques. Discover vulnerability and exploit details7 min read·blog.voorivex.team11RAFeb 15, 2025
