Never feed a beast you don't want to grow

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Google OAuth is broken

   TruffleSec released a Google OAuth vulnerability that allows employees at companies to retain indefinite access to applications like Slack and Zoom, after they’re off-boarded and removed from their company’s Google organization.

   Read : Google OAuth is broken
2. /02

   Why Air Quality Matters

   DHH's brand new house was making them sick. That lead him to study indoor air quality, and the findings were stunning. Besides the risk of making you physically sick, your mental capacity can take a serious hit.

   Watch : Why Air Quality Matters
3. /03

   Apache Struts File Upload Exploit (CVE-2023-50164) analysis and POC

   Read : Apache Struts File Upload Exploit (CVE-2023-50164) analysis and POC
4. /04

   Having some fun with JavaScript hoisting

   Showing the usage and abuse of hoisting in JavaScript in XSS challenges posted on Twitter during November/December of 2023.

   Read : Having some fun with JavaScript hoisting
5. /05

   Remote Code Execution on Ahold Delhaize, one of the biggest food retail groups

   This critical CVSS 10 bug went unpatched for longer than 3.5 years after reporting it.

   Read : Remote Code Execution on Ahold Delhaize, one of the biggest food retail groups