Users querying dim_hacker_reports table through Analytics API can determine data from dim_reports table using WHERE or HAVING query
HackerOne disclosed a bug submitted by jobert: https://hackerone.com/reports/1824342 [Source]
SQL Injection + Insecure Deserialization leads to Remote Code Execution on https://krisp.ai
Krisp disclosed a bug submitted by mikemyers: https://hackerone.com/reports/1842674 - Bounty: $5000 [Source]
CRLF Injection in Nodejs undici via host
Node.js disclosed a bug submitted by timon8: https://hackerone.com/reports/1820955 [Source]
2022 Detectify Crowdsource Awards: Meet the winners
The post 2022 Detectify Crowdsource Awards: Meet the winners appeared first on Detectify Labs. [Source]
Bug Bytes #193 – Top 10 Web Hacking Techniques for 2022, Confessions of the Community and Filter Evasion
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources. This issue covers the weeks from February 13th to February 19th...