Hello team


I found a bug (sensitive information ) can be used from attackers to perfom attack in youre server
I don't know if this in scope so i'm sorry if i'm wrrong

withou spending youre...

**Summary & Denoscription :
If you have a private project or private group then no non member should be able to access any information.But Adding Labels in your Private boards API request is...

Vulnerability denoscription
The .idea directory contains a set of configuration files (.xml) for your project. These configuration files contain information core to the project itself, such as names...

**Summary:** The peer discovery implementation is vulnerable to a Denial of Service attack due to improper management of connections.

**Denoscription:** The two main files of interest in detailing...

Hello peeps. I’m sp0re. This is my first post on 0x00sec, you can find more about me on my website. Today we are going to reverse engineer the network protocol of an android game so that we can automate the game, and earn unlimited money while drinking sodas…

As we all know, our session information is stored in the cookies 🍪 . Let’s begin by taking a look at what cookies are stored by facebook…

Hi Guys,

The ‘Night City’ blackmarket is powered by ‘Droidcoin’. An anonymous crypto-currency. The rogue androids seem to have hacked the ‘Nighty…

## Summary:
There's no check in `ssh1_login_process_queue` function when read `servkey` and `hostkey` length from packet which may cause heap overflow.
Remote code execution may be possible.

##...

Is OAuth GitHub really safe?

Hi hello everyone, This is Guhan Raja

When doing penetrating on this target, I collaborated with YoKo Kho to get the highest privileges. In this paper you may find a little…

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a...

Tutorgeeks hackerone bugcrowd proof of concept cobalt vulnerabilities bug bounty security penetration testing technology evangelist red team synack