🔹 Dependabot Confusion: Gaining Access to Private GitHub Repositories using Dependabot

📆 2023-05-06

#️⃣ #Dependency_confusion

🔹 CSS Injection via PostMessages to stealing Credit Card Info

📆 2023-05-05

#️⃣ #postMessage

🔹 Bullied by Bugcrowd over Kape CyberGhost disclosure

📆 2023-05-05

#️⃣ #Local_Privilege_Escalation

🔹 Cookie Bugs - Smuggling & Injection

📆 2023-05-05

#️⃣ #Cookie_smuggling

🔹 Privilege Escalations through Integrations

📆 2023-05-05

#️⃣ #postMessage

🔹 When Good APIs Go Bad: Uncovering 3 Azure API Management Vulnerabilities

📆 2023-05-04

#️⃣ #SSRF

🔹 The Art of Information Disclosure: A Deep Dive into CVE-2022-37985, a Unique Information Disclosure Vulnerability in Windows Graphics Component

📆 2023-05-03

#️⃣ #Out_of_bounds_Read

🔹 AWS Identity Center (formerly known as AWS SSO): A Guide to Privilege Escalation and Identity and Access Management

📆 2023-05-01

#️⃣ #Privilege_escalation

🔹 TENDA–N301-v6–(CVE-2023–29680,CVE-2023–29681)

📆 2023-04-30

#️⃣ #Sensitive_Information_Sent_Over_an_Unencrypted_Channel

🔹 New high-severity vulnerability (CVE-2023-29552) discovered in the Service Location Protocol (SLP)

📆 2023-04-25

#️⃣ #DoS

🔹 How Material Security Uncovered a Vulnerability in the Gmail API

📆 2023-04-18

#️⃣ #Broken_Access_Control

🔹 From Django Debug Mode to PII Data Leak of more than 500+ Employees due Broken Access Control and IDOR

📆 2023-04-14

#️⃣ #Debug_mode_enabled

🔹 Bypassing OGNL sandboxes for fun and charities

📆 2023-01-27

#️⃣ #OGNL_injection

🔹 Azure Active Directory Flaw Allowed SAML Persistence

📆 2023-01-18

#️⃣ #Azure_AD

🔹 APT HackTheBox | Detailed Writeup (Foothold)

📆 Mon, 08 May 2023 19:46:31 GMT

#️⃣ #cybersecurity #hackthebox #ctf #active_directory #writeup

🔹 Bypassing Protocol Concatenation in SSRF: Strategies for Testing Vulnerable Applications

📆 Mon, 08 May 2023 19:29:41 GMT

#️⃣ #bug_bounty_tips #bug_bounty

🔹 Оновлення DeGate за квітень 2023 р.

📆 Mon, 08 May 2023 19:09:26 GMT

#️⃣ #dex #ethereum #mainnet #degate #bug_bounty

🔹 Sorting Your Way to Stolen Passwords

📆 Mon, 08 May 2023 19:03:30 GMT

#️⃣ #bug_bounty #software_development #hacking #penetration_testing #cybersecurity

🔹 Account Takeover via Signup Feature

📆 Mon, 08 May 2023 20:14:19 GMT

#️⃣ #bug_bounty_writeup #bugs #bug_bounty #bug_bounty_tips #bug_fixes

🔹 Full Account takeover (even for admins)

📆 Mon, 08 May 2023 20:09:48 GMT

#️⃣ #bug_fixes #bugs #bug_bounty_writeup #bug_bounty_tips #bug_bounty

🔹 Admin Account Takeover worth $5,657

📆 Mon, 08 May 2023 20:03:38 GMT

#️⃣ #bugs #bug_bounty_tips #bug_fixes #bug_bounty_writeup #bug_bounty