• Airbnb Audit Results https://buer.haus/2017/03/08/airbnb-when-bypassing-json-encoding-xss-filter-waf-csp-and-auditor-turns-into-eight-vulnerabilities/ 8 comments 9/3/2017

• Remote Code Execution on Airbnb using Rails String Interpolation http://buer.haus/2017/03/13/airbnb-ruby-on-rails-string-interpolation-led-to-remote-code-execution/ 5 comments 13/3/2017 netsec