Hello Everyone, welcome back to another series of easy P4 vulnerabilities accepted on Platform and VDP which people aren't aware of.Continue reading on Medium » (https://medium.com/@anonymoustriager/another-easy-p4-ceaa67ef7e52?source=rss------bug_bounty-5)

CVE-2024–4956: UNAUTHENTICATED PATH TRAVERSAL IN NEXUS REPOSITORY MANAGER 3
https://codewithvamp.medium.com/cve-2024-4956-unauthenticated-path-traversal-in-nexus-repository-manager-3-b4e811ad7e37?source=rss------bug_bounty-5

The Nexus Repository Manager, a crucial tool for managing, storing, and distributing development artifacts, has recently been found to…Continue reading on Medium » (https://codewithvamp.medium.com/cve-2024-4956-unauthenticated-path-traversal-in-nexus-repository-manager-3-b4e811ad7e37?source=rss------bug_bounty-5)

CVE-2024–4956: UNAUTHENTICATED PATH TRAVERSAL IN NEXUS REPOSITORY MANAGER 3

The Nexus Repository Manager, a crucial tool for managing, storing, and distributing development artifacts, has recently been found to…Continue reading on Medium »
Read more...

I'm starting with Pentesting and decided to make a beginner tutorial.
https://www.reddit.com/r/Pentesting/comments/1d8va2g/im_starting_with_pentesting_and_decided_to_make_a/

submitted by /u/xKv0ThE (https://www.reddit.com/user/xKv0ThE)
[link] (https://youtu.be/4NF4rbCpATk) [comments] (https://www.reddit.com/r/Pentesting/comments/1d8va2g/im_starting_with_pentesting_and_decided_to_make_a/)

I am pentesting a copier, in which I found access to a chromium terminal. What all can be done from a chromium terminal? Could it be used to execute commands like any other command line interface?
https://www.reddit.com/r/Pentesting/comments/1d8zim5/i_am_pentesting_a_copier_in_which_i_found_access/

submitted by /u/TigBurdus (https://www.reddit.com/user/TigBurdus)
[link] (https://www.reddit.com/r/Pentesting/comments/1d8zim5/i_am_pentesting_a_copier_in_which_i_found_access/) [comments] (https://www.reddit.com/r/Pentesting/comments/1d8zim5/i_am_pentesting_a_copier_in_which_i_found_access/)

Can you guys test my API for any security flaws?
https://www.reddit.com/r/Pentesting/comments/1d8zj0k/can_you_guys_test_my_api_for_any_security_flaws/

<!-- SC_OFF -->Hey Guys,
i developed a little API to generate Inspect URLs and Gencodes for Counter Strike. (not important) I wanted to ask you guys if you can test the Endpoint and check if everything is fine.
I learned everything myself and used only pure PHP and SQL, so it might not be the best. You can use the Bearer Token "global-test-key" which has a limit of 10 Requests per Minute and 2000 per Day. You can find more Details about the API here (http://cs2gen.it/api/docs) <!-- SC_ON --> submitted by /u/Crafted_Mecke (https://www.reddit.com/user/Crafted_Mecke)
[link] (https://www.reddit.com/r/Pentesting/comments/1d8zj0k/can_you_guys_test_my_api_for_any_security_flaws/) [comments] (https://www.reddit.com/r/Pentesting/comments/1d8zj0k/can_you_guys_test_my_api_for_any_security_flaws/)

Another Easy P4 you miss!!!

Hello EveryoneContinue reading on Medium »
Read more...

Another Easy P4 you miss!!!
https://medium.com/@anonymoustriager/another-easy-p4-you-miss-dcadf65adbcb?source=rss------bug_bounty-5

Hello EveryoneContinue reading on Medium » (https://medium.com/@anonymoustriager/another-easy-p4-you-miss-dcadf65adbcb?source=rss------bug_bounty-5)

Unlock Any PC Remotely with Just an Image: The Ultimate VNC Hack!

Imagine being able to do this by simply booting from an image file — no complex setups, no hassle. This guide will walk you through the…Continue reading on Medium »
Read more...

Unlock Any PC Remotely with Just an Image: The Ultimate VNC Hack!
https://medium.com/@paritoshblogs/unlock-any-pc-remotely-with-just-an-image-the-ultimate-vnc-hack-a92b22637094?source=rss------bug_bounty-5

Imagine being able to do this by simply booting from an image file — no complex setups, no hassle. This guide will walk you through the…Continue reading on Medium » (https://medium.com/@paritoshblogs/unlock-any-pc-remotely-with-just-an-image-the-ultimate-vnc-hack-a92b22637094?source=rss------bug_bounty-5)

The only recon methodology you need.

the best way to recon using just one tool.Continue reading on Medium »
Read more...

The only recon methodology you need.
https://an0nbil.medium.com/the-only-recon-methodology-you-need-cf6c3aff1af1?source=rss------bug_bounty-5