Curated security research, vulnerabilities, advisories and tools for practitioners.

#account-takeover

Security coverage tagged account-takeover. (Page 2)

31.

TaskCafe, Version 0.3.2 Advisory

blog | 2023-06-20 00:00 | bishopfox.com | Original ↗ | .md | #access-control | #account-takeover | #xss

32.

From Theory to Reality: Explaining the Best Prompt Injection Proof of Concept

blog | 2023-05-19 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #account-takeover | #prompt-injection

33.

Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More

blog | 2023-01-03 00:00 | samcurry.net | Original ↗ | .md | #bug-bounty | #account-takeover | #api-security

34.

Hacking on a plane: Leaking data of millions and taking over any account

blog | 2022-12-02 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #bug-bounty | #account-takeover

35.

PayPal's Third LHE Brings Top Global Hackers to the Virtual Stage

blog | 2022-07-29 18:09 | hackerone.com | Original ↗ | .md | #bug-bounty | #account-takeover | #mobile-security

36.

CVE-2022-24948: Apache JSPWiki preauth Stored XSS to ATO

vulnerability | 2022-03-02 10:15 | CVE-2022-24948 | pwn.ai | Original ↗ | .md | #vulnerability-research | #account-takeover | #stored-xss

37.

Hacking Chess.com and Accessing 50 Million Customer Records

blog | 2020-12-16 00:00 | samcurry.net | Original ↗ | .md | #bug-bounty | #account-takeover | #api-security

38.

Retail Cybersecurity: 2020 State of the Industry

blog | 2020-11-11 00:00 | bugcrowd.com | Original ↗ | .md | #account-takeover | #phishing | #bugcrowd

39.

Taking over Azure DevOps Accounts with 1 Click

research | 2020-06-28 00:00 | slcyber.io | Original ↗ | .md | #cloud | #vulnerability-research | #account-takeover

40.

Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts

blog | 2020-04-19 00:00 | samcurry.net | Original ↗ | .md | #bug-bounty | #account-takeover | #web-security

41.

h1-415 CTF Winners Announced!

blog | 2020-02-03 23:00 | hackerone.com | Original ↗ | .md | #account-takeover | #ctf | #hackerone

42.

Permanent account takeover on Yahoo's Small Business platform

blog | 2017-06-25 00:00 | samcurry.net | Original ↗ | .md | #bug-bounty | #account-takeover | #authentication

43.

XSS Bugs that Prove the Danger in ‘XSS-Fatigue’

vulnerability | 2016-10-10 00:00 | bugcrowd.com | Original ↗ | .md | #account-takeover | #xss | #bugcrowd

44.

Big Bugs | Episode 5: Big XSS–Not an Oxymoron

vulnerability | 2016-08-30 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #account-takeover | #xss