Blog

• Tivio Studio: Paid videos from creators were free to download – even unreleased content (DVTV, Oktagon and others) 12. 3.

• DOM-based Extension Clickjacking: Your Password Manager Data at Risk 9. 8.

• Herohero: All User Data Was at Risk – Potential Theft of Tens of Millions of CZK 1. 8.

• Another session stealing on Seznam.cz: How I gained unlimited access to someone else's email without knowing the password 17. 7.

• You should disable autofill in your password manager 13. 7.

• Cookies stealing on Seznam.cz and gaining access to victim's e-mail 30. 11.
• Security Analysis of Czech E-commerce Platforms 30. 9.
• Exploiting XSS with 20 characters limitation 23. 8.