Curated security research, vulnerabilities, advisories and tools for practitioners.

#ssrf

Security coverage tagged ssrf. (Page 2)

31.

Ray, Versions 2.6.3, 2.8.0

blog | 2023-11-27 00:00 | bishopfox.com | original ↗ | #vulnerability-disclosure | #ai-infrastructure | #ssrf

32.

The top 10 community-created BChecks, so far ...

blog | 2023-07-24 14:09 | CVE-2023-25690 | portswigger.net | original ↗ | #burp-suite | #community | #bchecks

33.

How a startup’s cloud got taken over by a simple form that sends emails

blog | 2023-04-10 00:00 | aikido.dev | original ↗ | #cloud | #cloud-security | #aws

34.

Atlassian Jira Align, Version 10.107.4 Advisory

blog | 2022-10-24 00:00 | CVE-2022-36802 | bishopfox.com | original ↗ | #cloud | #privilege-escalation | #ssrf

35.

Exploiting Web3's Hidden Attack Surface: Universal XSS on Netlify's Next.js Library

vulnerability | 2022-09-21 00:00 | samcurry.net | original ↗ | #web3 | #xss | #nextjs

36.

File Upload Attacks (Part 2)

blog | 2021-06-16 15:18 | yeswehack.com | original ↗ | #bug-bounty | #rce | #web-security

37.

How Hackers Can Help Reduce Your Organization's Application Risk on AWS

blog | 2021-06-15 18:48 | hackerone.com | original ↗ | #cloud | #cloud-security | #aws

38.

Spotlight on the Server-Side

vulnerability | 2021-05-25 19:00 | hackerone.com | original ↗ | #cloud | #cloud-security | #hackerone

39.

DOJO CHALLENGE #9 Winners!

blog | 2021-04-26 15:38 | yeswehack.com | original ↗ | #bug-bounty | #ctf | #prototype-pollution

40.

DOJO CHALLENGE #8 Winners!

blog | 2021-03-29 09:01 | yeswehack.com | original ↗ | #ctf | #web-security | #dojo

41.

Hidden OAuth attack vectors

research | 2021-03-25 14:49 | portswigger.net | original ↗ | #user-enumeration | #ssrf | #oauth

42.

ProxyLogon (CVE-2021-26855): 2021’s Top Contender for Vulnerability for the Year (It’s March...)

vulnerability | 2021-03-10 00:00 | CVE-2021-26855 | bishopfox.com | original ↗ | #zero-day | #ssrf | #proxylogon

43.

Unauthorized RCE in VMware vCenter

vulnerability | 2021-02-24 17:11 | swarm.ptsecurity.com | original ↗ | #rce | #vulnerability-research | #vmware

44.

How to Find XXE Bugs: Severe, Missed and Misunderstood

vulnerability | 2021-02-19 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #rce | #web-security

45.

Infosec Talks You May Have Missed This Year

blog | 2020-12-18 00:00 | bishopfox.com | original ↗ | #cloud | #def-con | #ssrf

46.

Vulnerabilities in McAfee ePolicy Orchestrator

research | 2020-12-07 13:52 | swarm.ptsecurity.com | original ↗ | #rce | #vulnerability-research | #cve

47.

Web Security Academy - your questions answered

blog | 2020-12-03 15:31 | portswigger.net | original ↗ | #sql-injection | #xss | #labs

48.

HackerOne Joins AWS Marketplace as Cloud Vulnerabilities Rise

blog | 2020-12-03 18:00 | hackerone.com | original ↗ | #cloud | #cloud-security | #aws

49.

Design Considerations for Secure GraphQL APIs

blog | 2020-09-28 00:00 | bishopfox.com | original ↗ | #appsec | #api-security | #graphql

50.

Zamzar API Advisory

vulnerability | 2020-08-27 00:00 | bishopfox.com | original ↗ | #api-security | #vulnerability | #advisory

51.

Vulnerabilities in the Openfire Admin Console

research | 2020-08-04 14:16 | swarm.ptsecurity.com | original ↗ | #vulnerability-research | #cve | #ssrf

52.

Hacker Spotlight: Interview with meals

blog | 2020-07-03 16:00 | hackerone.com | original ↗ | #bug-bounty | #rce | #sql-injection

53.

DigDash Enterprise: Versions 2018R2-2020R1

vulnerability | 2020-06-15 00:00 | CVE-2020-13650 | bishopfox.com | original ↗ | #xss | #vulnerability | #advisory

54.

Hacking the Singapore Government: Q&A with Hacker Personality Samuel Eng

blog | 2020-06-15 19:00 | hackerone.com | original ↗ | #bug-bounty | #hacker-spotlight | #interview

55.

Bugcrowd + PentesterLab — Learn Web Hacking Easier!

blog | 2020-02-11 00:00 | bugcrowd.com | original ↗ | #web-security | #xss | #training

56.

My first RCE: a tale of good ideas and good friends

vulnerability | 2019-11-29 00:00 | josephthacker.com | original ↗ | #bug-bounty | #rce | #methodology

57.

Bugcrowd University – What’s New?

blog | 2019-09-10 00:00 | bugcrowd.com | original ↗ | #burp-suite | #def-con | #reconnaissance

58.

Supporting Researcher Success through Education & Collaboration

research | 2019-08-06 00:00 | bugcrowd.com | original ↗ | #burp-suite | #training | #education

59.

The HackerOne Top 10 Most Impactful and Rewarded Vulnerability Types

vulnerability | 2019-06-11 13:30 | hackerone.com | original ↗ | #privilege-escalation | #idor | #owasp

60.

Bugcrowd Releases Vulnerability Rating Taxonomy 1.6

vulnerability | 2018-11-13 00:00 | bugcrowd.com | original ↗ | #bugcrowd | #ssrf | #dmarc

← Previous More →