Header CRLF Injection in Ruby Net::HTTP
Ruby disclosed a bug submitted by leixiao: https://hackerone.com/reports/1718757 [Source]
Insecure Direct Object Reference (IDOR) – Delete Campaigns
HackerOne disclosed a bug submitted by datph4m: https://hackerone.com/reports/1969141 - Bounty: $12500 [Source]
Reflected XSS on marketsandresearch.td.com
TD Bank disclosed a bug submitted by def1ant: https://hackerone.com/reports/1873305 [Source]
Bug Bytes #198 – Hackers go to RSA/BSides and CPanel gets pwned
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources. This issue covers the weeks from April 24th to April 30th...