Programme HackerOne Cloudflare Public Bug Bounty Cloudflare Public Bug Bounty Submitted by albertspedersen albertspedersen Report Take over subdomains of r2.dev...
Programme HackerOne Yelp Yelp Submitted by qualwin3001 qualwin3001 Report CORS Misconfiguration on Yelp Full Report A considerable amount of time...
Programme HackerOne Node.js Node.js Submitted by zeyu2001 zeyu2001 Report DNS rebinding in --inspect (insufficient fix of CVE-2022-32212 affecting macOS devices)...
The recently discovered malware builder Quantum Builder is being used by threat actors to deliver the Agent Tesla RAT. A...
ONLINE DISINFORMATION is one of the defining issues of our time and the influence of fake news has become an...
The Russia-linked APT28 group is using mouse movement in decoy Microsoft PowerPoint documents to distribute malware. The Russia-linked APT28 employed a technique...
What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。red team tools Code-level optimization, parameter optimization, and...
The recently born Bl00Dy Ransomware gang has started using the recently leaked LockBit ransomware builder in attacks in the wild....
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
nuvola is the new open-source cloud security tool to address the privilege escalation in cloud environments. nuvola is the new...
NAME AjaXplorer cross-site scripting Platforms Affected:Ajaxplorer Ajaxplorer 4.2.3Risk Level:7.2Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION AjaXplorer is vulnerable to cross-site scripting, caused by improper...
NAME Google Chrome Import code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote attacker...
NAME Mist command execution Platforms Affected:Mist Mist 0.9.4Risk Level:8.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Mist could allow a local attacker to execute arbitrary...
NAME Bifrost security bypass Platforms Affected:Bifrost Bifrost 1.8.6-releaseRisk Level:8.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION Bifrost could allow a remote authenticated attacker to bypass...
NAME Google Chrome ChromeOS Notifications code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote...
NAME Tenda i9 command execution Platforms Affected:Tenda i9 1.0.0.8(3828)Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Tenda i9 could allow a remote attacker to...
NAME Google Chrome Media code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote attacker...
NAME Google Chrome Survey code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote attacker...
NAME Google Chrome Assistant code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote attacker...
