Cybersecurity information flow

作者:ap (@decoder_it) 程序:- 漏洞类型:ADCS,Authentication coercion,Active Directory Privilege Escalation,Internal pentest 赏金:-

作者:Mahmoud Hamed (@7odamo_) 程序:- 漏洞类型:CORS misconfiguration,Self-XSS,Samesite cookie bypass 赏金:5,000

作者:Khaled Mohamed (@0xElkomy) 程序:Apple (iTunes) 漏洞类型:CRLF injection,XSS 赏金:-

作者:Brett Buerhaus (@bbuerhaus),Sam Curry (@samwcyo),Maik Robert (@xEHLE_) 程序:- 漏洞类型:DOM Clobbering,XSS,postMessage,CSP bypass 赏金:-

作者:Kuldeep Pandya (@kuldeepdotexe) 程序:- 漏洞类型:SQL injection 赏金:-

作者:the_unluck_guy (@7he_unlucky_guy) 程序:- 漏洞类型:Default credentials 赏金:500

作者:Garrett Foster (@garrfoster) 程序:- 漏洞类型:SCCM site takeover 赏金:-

作者:- 程序:TP-Link 漏洞类型:Authentication bypass,Stack overflow,Memory corruption,Security code review 赏金:-

作者:Stefan Schiller (@scryh_) 程序:Joomla! 漏洞类型:XSS,Regex,Security code review 赏金:-

作者:Nitay Bachrach 程序:- 漏洞类型:Salesforce,SOQL injection 赏金:-

作者:Johan Carlsson (@joaxcar) 程序:PortSwigger 漏洞类型:CSP bypass 赏金:1,500

作者:Florian Hauser (@frycos) 程序:Salesforce (Tableau) 漏洞类型:SSRF 赏金:-

作者:Paulos Yibelo (@PaulosYibelo) 程序:- 漏洞类型:Cross Window Forgery,Account takeover 赏金:-

作者:Abdelkader Mouaz (@hamzadzworm) 程序:- 漏洞类型:Logic flaw,HTML injection 赏金:-

作者:Jackson 程序:Dutch Government 漏洞类型:Path traversal,40x bypass,Nginx misconfiguration 赏金:-

作者:Kuldeep Pandya (@kuldeepdotexe) 程序:- 漏洞类型:Web cache deception 赏金:-

作者:Harsh Jaiswal (@rootxharsh),Rahul Maini (@iamnoooob) 程序:Apple,Lucee 漏洞类型:RCE,Insecure deserialization,ColdFusion,Security code review 赏金:20,000

作者:Khaled Mohamed (@0xElkomy) 程序:- 漏洞类型:Hardcoded credentials 赏金:-

作者:Mizu (@kevin_mizu) 程序:DOMPurify 漏洞类型:Mutation XSS,Filter bypass 赏金:-

作者:Cristi Vlad (@CristiVlad25) 程序:- 漏洞类型:IDOR,Account takeover,Privilege escalation,Password reset 赏金:-

作者:Ilay Goldman (@GoldmanIlay) 程序:Ubuntu 漏洞类型:Supply chain attack 赏金:-

作者:ACE Responder (@ACEResponder) 程序:BC Security (Empire) 漏洞类型:RCE,Path traversal,Arbitrary file overwrite 赏金:-

作者:Jonas Bülow Knudsen 程序:- 漏洞类型:ADCS,Active Directory 赏金:-

作者:Inderjeet Singh (@3nc0d3dGuY) 程序:- 漏洞类型:Privilege escalation 赏金:-

作者:Mathieu Farrell 程序:- 漏洞类型:Insecure deserialization,PHP pop chain 赏金:-

作者:Tyler Ramsbey (@Tyler_Ramsbey) 程序:Ghost 漏洞类型:Stored XSS,Account takeover 赏金:-

作者:Zach Grace 程序:- 漏洞类型:Kubernetes,GraphQL 赏金:-

作者:Mukund Bhuva (@MukundBhuva) 程序:Dutch Government 漏洞类型:RCE,Code injection 赏金:-

作者:Jayateertha Guruprasad (@JayateerthaG) 程序:Microsoft (Bing) 漏洞类型:JSON CSRF 赏金:-

作者:watchTowr (@watchtowrcyber) 程序:- 漏洞类型:RCE,LFI,Security code review 赏金:-