A misconfiguration in an organizations' setup of their live chat system allowed unauthenticated access to user chat histories with customer support agents.

(Ethically). Here's how I did it.

Retr0's Threat Research

the more complex it is, the more niche it is, the clearer the path will be

man is lazy by nature and tends to take the easy way out; the more the market is clogged, the more one must delve into the depths of knowledge to make a difference

-in this context…

The talk "Practical Exploitation of DoS in Bug Bounty" explains methods for identifying and exploiting Denial of Service (DoS) vulnerabilities in bug bounty programs. Starting with an overview of DoS attacks and their impact, we will highlight how these attacks…

Some time ago, while reading up on new CSS features, I asked myself: Is it possible to leak the entire content of an HTML text node only using CSS?

CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT). - doyensec/CSPTPlayground

Discover the hidden risks of using trivial packages in development. Learn how small, seemingly insignificant dependencies can lead to significant security vulnerabilities.

Hello everyone, it’s Osama (W4lT3R) again! I wanted to share a recent finding with you where I successfully bypassed the CSRF protection…

CyberPanel RCE CVE Exploit 0day

Hi `DOD` Team,

# Summary:

* When accessing the endpoint on https:// ██████████/jolokia/exec/com.sun.management:type=DiagnosticCommand/compilerDirectivesAdd/ it is possible to path traversal on the...