In this blog post, I’m going to share about a double-free vulnerability that I discovered in WhatsApp for Android, and how I turned it into an RCE. I informed this to Facebook. Facebook acknowledged and patched it officially in WhatsApp version 2.19.244.…

Before explaining how I was able to perform remote code execution on one of Adobe Experience Manager instance at bug bounty program let me…

Hi, This is Aziz Hakim a.k.a hackerb0y

📱 objection - runtime mobile exploration. Contribute to sensepost/objection development by creating an account on GitHub.

I was rewarded $1900 For reporting CSRF and Stored XSS on a private program on @Bugcrowd . It was a Stored XSS on profile Bio section. WAF Bypass payload:- ">'><details/open/ontoggle=confirm('XSS')> #BugBounty #ittakesacrowd

### Summary

Gitlab sets the ownership of the logdirectory to the system-user "git", which might let local users obtain root access because of unsafe interaction with logrotate.

### Steps to...

I found that https://login.fr.cloud.gov/oauth/authorize has vulnerability by open redirect on oauth redirect_uri which can lead to users oauth tokens being leaked to any malicious user.

Step :
1,...

**Description:** There is no csrf_token validation while logging in which leads to csrf.
**base request :**
>
POST /login HTTP/1.1
Host: analytics.mopub.com
Connection: close
Content-Length:...

Introduction :

While working for browser-based attacks on the URL bar, I learned a way where it was still possible to spoof address bar in safari. None…

Last month I published HTTP Desync Attacks: Request Smuggling Reborn. Since then, there's been a range of new developments. While vendors have been deploying fixes and publishing advisories, I've devi

Tools to play around #JavaScript files + extracting URLs github.com/cablej/FileCha… github.com/003random/getJS github.com/nahamsec/JSPar… github.com/zseano/JS-Scan github.com/Lopseg/Jsdir github.com/jobertabma/rel… github.com/GerbenJavado/L… please add, if…

If you are reading is possibly because you:

Karim Rahal tell us why he prefers Firefox, and in this blog he looks at a containers extension, research on tracker protection, and breach alert system.

In this report, the researcher found that sending a request with an invalid Accept header to `http://www.rockstargames.com/index` resulted in a full path disclosure to the webroot. This was fixed...

Before I start. I want to take a moment to all who helped me learn Web Application Security and Bug Bounty Hunting! :)

Calendar Exploit. . Contribute to Ophion-Security/calexe development by creating an account on GitHub.