HomeDAILY WRITE-UP

DAILY WRITE-UP

Share Daily Link of Bug Bounty Write-up from around the world.

How to build custom scanners for web security research automation

Christin - 6:08 AM

$1,250 worth of Host Header Injection

nOAuth: Account Takeover via Microsoft Oauth

Exploiting ASP.NET TemplateParser — Part II: SharePoint (CVE-2023-33160)

root with a single command: sudo logrotate

A QUIC Shutdown: DoS Vulnerability in Windows Servers Running SMB over QUIC

Christin - 5:50 AM 0

Getting SYSTEM on Windows in style

Christin - 5:06 AM 0

[P2O Vancouver 2023] SharePoint Pre-Auth RCE chain (CVE-2023–29357 & CVE-2023–24955)

Christin - 5:04 AM 0

Discovering 7 Open Redirect Bypasses and 3 XSS Bypasses Within a Single Program Using the Same Parameters

Christin - 5:00 AM 0

DoubleQlik: Bypassing the Fix for CVE-2023-41265 to Achieve Unauthenticated Remote Code Execution

Christin - 4:58 AM 0

Van1338: Design Flaw in Riot Vanguard: $6,000

Christin - 4:57 AM 0

One Bug at a Time: $1,500 worth of XSS

Christin - 4:56 AM 0

How I Got 4 SQLI Vulnerabilities At One Target Manually Using The Repeater Tab

Christin - 4:54 AM 0

From Oversight to Ownership: How I Discovered the Path to Root on ISP’s Multiple Servers

Christin - 4:53 AM 0

PHAR DESERIALIZATION (CVE-2023-28115 PATCH BYPASS)

Christin - 4:50 AM 0

Unauthenticated Massive PII Leak

Christin - 4:45 AM 0

Leaked Database and SMTP credentials through .env file

Christin - 4:43 AM 0

12 3 4 Page 1 of 4

Most Popular

Bug Bounty: Trick to Find Account Takeover and GET BOUNTY

7:41 AM

Metabase RCE: CVE-2023-38646

3:19 PM

34 Millions Passport of Indonesian Leaked by BJORKA

4:58 AM

Exploring File Traversal and Directory Traversal: List of File Path Locations

8:31 AM

GOOGLE ADVERTISEMENT

- Advertisement -