
Blind-XSS-Manager
Never forget where you inject.
payload-generationpenetration-testingweb-application-exploitation+1
306

Never forget where you inject.

An explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in…