Unclaimed official s3 bucket of tendermint(tendermint-packages) which is used by many other blockchain companies in their code
Cosmos disclosed a bug submitted by bhatiagaurav1211: https://hackerone.com/reports/1397826 - Bounty: $400 [Source]
CVE-2023-23914: curl HSTS ignored on multiple requests
curl disclosed a bug submitted by nyymi: https://hackerone.com/reports/1813864 [Source]
CVE-2023-23915: HSTS amnesia with –parallel
curl disclosed a bug submitted by nyymi: https://hackerone.com/reports/1814333 [Source]
connect.8×8.com: Users with no permission can track/access restricted details/data via GET /api/v2/support/requests/HTTP/2
8x8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1499114 - Bounty: $777 [Source]
connect.8×8.com: admin user can send invites on behalf of another admin user via POST /api/v1/users//invites
8x8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1474536 - Bounty: $777 [Source]
connect.8×8.com: deactivated users remain access to /api/v1/users/UUID/roles
8x8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1473071 - Bounty: $777 [Source]
jaas.8×8.vc: Removed users can still have READ/WRITE access to the workspace via different API endpoints
8x8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1479894 - Bounty: $777 [Source]
admin.8×8.vc: Member users with no permission can integrate email to connect calendar via GET /meet-external/spot-roomkeeper/v1/calendar/auth/init?..
8x8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1486310 - Bounty: $777 [Source]
Bug Bytes #192 – Post-recon blues, a lesson in Rust and fuzzing open source
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources. This issue covers the weeks from February 6th to February 12th...
Safe harbor legal framework for ethical hacker officially launches in Belgium
As part of the Belgian Act on the Protection of Whistleblowers, dispositions were adopted to offer a safe harbor for ethical hackers who respect certain strict conditions. Some positive developments impacting Belgium’s cybersecurity industry came into effect today (February 15), with newly adopted legal dispositions serving to protect ethical hackers and...