Leak JWT Private Key leads to Bypass Authentication

This is a writeup about how I found an authentication bypass vulnerability through leaking the Private key of JWT Token.Continue reading on Medium »
Read more...

Strengthening E-commerce Security Leveraging Bug Bounty Programs
https://medium.com/@Land2Cyber/strengthening-e-commerce-security-leveraging-bug-bounty-programs-74c147742123?source=rss------bug_bounty-5

In the bustling world of e-commerce, where transactions flow seamlessly and customer data is paramount, ensuring robust cybersecurity is…Continue reading on Medium » (https://medium.com/@Land2Cyber/strengthening-e-commerce-security-leveraging-bug-bounty-programs-74c147742123?source=rss------bug_bounty-5)

Securing the Future: Bug Bounty Programs for IoT (Internet of Things) Devices
https://medium.com/@Land2Cyber/securing-the-future-bug-bounty-programs-for-iot-internet-of-things-devices-0d62b216427a?source=rss------bug_bounty-5

In an increasingly connected world, the proliferation of IoT (Internet of Things) devices has revolutionized the way we interact with…Continue reading on Medium » (https://medium.com/@Land2Cyber/securing-the-future-bug-bounty-programs-for-iot-internet-of-things-devices-0d62b216427a?source=rss------bug_bounty-5)

Strengthening Cyber Defenses Enhancing Security Posture through Bug Bounty Programs
https://medium.com/@Land2Cyber/strengthening-cyber-defenses-enhancing-security-posture-through-bug-bounty-programs-16be3de34fa1?source=rss------bug_bounty-5

In an era where cyber threats loom large, organizations must continuously bolster their security posture to defend against evolving risks…Continue reading on Medium » (https://medium.com/@Land2Cyber/strengthening-cyber-defenses-enhancing-security-posture-through-bug-bounty-programs-16be3de34fa1?source=rss------bug_bounty-5)

Leak JWT Private Key leads to Bypass Authentication
https://sonnguy3n.medium.com/leak-jwt-private-key-leads-to-bypass-authentication-e0bd984f55ad?source=rss------bug_bounty-5

This is a writeup about how I found an authentication bypass vulnerability through leaking the Private key of JWT Token.Continue reading on Medium » (https://sonnguy3n.medium.com/leak-jwt-private-key-leads-to-bypass-authentication-e0bd984f55ad?source=rss------bug_bounty-5)

Bug Bounty should be a goto solution for your web3 security needs

Imagine your web3 company as a fortress in the digital landscape, constantly under siege from cyber threats. In this battle for security…Continue reading on Medium »
Read more...

Bug Bounty should be a goto solution for your web3 security needs
https://securrtech.medium.com/bug-bounty-should-be-a-goto-solution-for-your-web3-security-needs-46b0f07b1a96?source=rss------bug_bounty-5

Imagine your web3 company as a fortress in the digital landscape, constantly under siege from cyber threats. In this battle for security…Continue reading on Medium » (https://securrtech.medium.com/bug-bounty-should-be-a-goto-solution-for-your-web3-security-needs-46b0f07b1a96?source=rss------bug_bounty-5)

Jenkins Arbitrary File Reading Vulnerability (CVE-2024–23897) — Bug Bounty Tuesday

Today is Bug bounty Tuesday, I will share with you about Jenkins Arbitrary File…Continue reading on Medium »
Read more...

Huntr-Com-Bug-Bounties-Collector - Keep Watching New Bug Bounty (Vulnerability) Postings
http://www.kitploit.com/2024/02/huntr-com-bug-bounties-collector-keep.html

New bug bounty(vulnerabilities) collector
Requirements
Chrome with GUI (If you encounter trouble with script execution, check the status of VMs GPU features, if available.) Chrome WebDriver
Preview
# python3 main.py

*2024-02-20 16:14:47.836189*

1. Arbitrary File Reading due to Lack of Input Filepath Validation
- Feb 6th 2024 / High (CVE-2024-0964)
- gradio-app/gradio
- https://huntr.com/bounties/25e25501-5918-429c-8541-88832dfd3741/

2. View Barcode Image leads to Remote (https://www.kitploit.com/search/label/Remote) Code Execution
- Jan 31st 2024 / Critical (CVE: Not yet)
- dolibarr/dolibarr
- https://huntr.com/bounties/f0ffd01e-8054-4e43-96f7-a0d2e652ac7e/

(delimiter-based file database) # vim (https://www.kitploit.com/search/label/Vim) feeds.db

1|2024-02-20 16:17:40.393240|7fe14fd58ca2582d66539b2fe178eeaed3524342|CVE-2024-0964|https://huntr.com/bounties/25e25501-5918-429c-8541-88832dfd3741/
2|2024-02-20 16:17:40.393987|c6b84ac808e7f229a4c8f9fbd073b4c0727e07e1|CVE: Not yet|https://huntr.com/bounties/f0ffd01e-8054-4e43-96f7-a0d2e652ac7e/
3|2024-02-20 16:17:40.394582|7fead9658843919219a3b30b8249700d968d0cc9|CVE: Not yet|https://huntr.com/bounties/d6cb06dc-5d10-4197-8f89-847c3203d953/
4|2024-02-20 16:17:40.395094|81fecdd74318ce7da9bc29e81198e62f3225bd44|CVE: Not yet|https://huntr.com/bounties/d875d1a2-7205-4b2b-93cf-439fa4c4f961/
5|2024-02-20 16:17:40.395613|111045c8f1a7926174243db403614d4a58dc72ed|CVE: Not yet|https://huntr.com/bounties/10e423cd-7051-43fd-b736-4e18650d0172/

Notes
This code is designed to parse HTML elements from huntr.com, so it may not function correctly if the HTML page structure changes. In case of errors during parsing, exception handling has been included, so if it doesn't work as expected, please inspect the HTML source for any changes. If get in trouble In a typical cloud (https://www.kitploit.com/search/label/Cloud) environment, scripts (https://www.kitploit.com/search/label/Scripts) may not function properly within virtual machines (VMs).

Download Huntr-Com-Bug-Bounties-Collector (https://github.com/password123456/huntr-com-bug-bounties-collector)