CVE-2022–42710: A journey through XXE to Stored-XSS

Hi everybody, I will share with you in this article in detail how I was able to find CVE-2022–42710 through static analysisContinue reading on Medium »
Read more...

Simple CORS misconfig leads to disclose the sensitive token worth of $$$
https://0xraminfosec.medium.com/simple-cors-misconfig-leads-to-disclose-the-sensitive-token-worth-of-91433763f4d6?source=rss------bug_bounty-5

Hey fellow hacker’s and Bug hunters , Recently i found some weird CORS misconfiguration in one of my targets.Continue reading on Medium » (https://0xraminfosec.medium.com/simple-cors-misconfig-leads-to-disclose-the-sensitive-token-worth-of-91433763f4d6?source=rss------bug_bounty-5)

CVE-2022–42710: A journey through XXE to Stored-XSS
https://omar0x01.medium.com/cve-2022-42710-a-journey-through-xxe-to-stored-xss-851d74dfe917?source=rss------bug_bounty-5

Hi everybody, I will share with you in this article in detail how I was able to find CVE-2022–42710 through static analysisContinue reading on Medium » (https://omar0x01.medium.com/cve-2022-42710-a-journey-through-xxe-to-stored-xss-851d74dfe917?source=rss------bug_bounty-5)

Hacking on Medium
GitHub anuncia escaneo secreto gratuito para todos los repositorios públicos

https://cdn-images-1.medium.com/max/1293/0*Roupl0VqtaPJTU0b
GitHub dijo el jueves que está poniendo a disposición su servicio de escaneo secreto para todos los repositorios públicos en la plataforma…

Continue reading on Medium »

Hacking on Medium
The Importance of Self Custody

https://cdn-images-1.medium.com/max/1200/0*-MtZy06hicTnTlmT
A Self custody wallet is a wallet that you hold the keys for, giving you ownership of and control over the funds it holds. Learn more.

Continue reading on Medium »

Hacking on Medium
IWCON2022 Networking Rooms Are Now Open + New Speaker Announcement

https://cdn-images-1.medium.com/max/1149/1*X2C_TKOy7MIrKdbpXjQgBA.png
Join in on some super cool infosec discussions from experts all over the world!

Continue reading on InfoSec Write-ups »

Hacking on Medium
TryHackMe Advent of Cyber [Day 16]-> Secure Coding: SQLi’s the king, the carolers sing

https://cdn-images-1.medium.com/max/982/0*2hwbXCoXlz1lXqsT.png
WHAT IS THE SQL IN SQLI?

Continue reading on Medium »

Hacking on Medium
Simple CORS misconfig leads to disclose the sensitive token worth of $$$

https://cdn-images-1.medium.com/max/640/1*uemwkdK6thWOKufTChnK5A.gif
Hey fellow hacker’s and Bug hunters , Recently i found some weird CORS misconfiguration in one of my targets.

Continue reading on Medium »

Dark Reading: Attacks/Breaches
New Botnet Targeting Minecraft Servers Poses Potential Enterprise Threat

Microsoft warns enterprises should pay attention to a new botnet used to launch DDoS attacks on private Minecraft Java servers.

Dark Reading: Attacks/Breaches
FBI: Criminals Using BEC Attacks to Scavenge Food Shipments

Cybercriminal rats are at play: Several food suppliers and distributors have experienced hundreds of thousands of dollars in losses after fulfilling fraudulently placed orders for food and ingredient shipments.