Web

Exploiting a race condition in database writes and a checksum oracle to brute-force a secret file character by character.

Abusing Python’s floating point arithmetic to forge JWT-like tokens — when float(‘inf’) meets type juggling.