⤷ Title: Improper Authentication in a famous Trading website
════════════════════════
𐀪 Author: Anonymousshetty
════════════════════════
ⴵ Time: Tue, 14 Jan 2025 14:59:48 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ethical_hacking #improper_access_control #bug_bounty_tips
════════════════════════
𐀪 Author: Anonymousshetty
════════════════════════
ⴵ Time: Tue, 14 Jan 2025 14:59:48 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ethical_hacking #improper_access_control #bug_bounty_tips
Medium
Improper Authentication in a famous Trading website
**disclaimer: please take permission before testing any website and do not perform actions without understanding its impact ;)
⤷ Title: OWASP LLM Top 10 — Improper Output Handling in AI Systems
════════════════════════
𐀪 Author: Anil Kumar Nandibhatla
════════════════════════
ⴵ Time: Fri, 31 Jan 2025 05:29:45 GMT
════════════════════════
⌗ Tags: #llm #best_practices #owasp #improper_output_handling #cybersecurity
════════════════════════
𐀪 Author: Anil Kumar Nandibhatla
════════════════════════
ⴵ Time: Fri, 31 Jan 2025 05:29:45 GMT
════════════════════════
⌗ Tags: #llm #best_practices #owasp #improper_output_handling #cybersecurity
Medium
OWASP LLM Top 10 — Improper Output Handling in AI Systems
Large Language Models (LLMs) generate responses based on complex probability calculations, but without proper safeguards, these outputs…
⤷ Title: $200 Easy Bounty: Improper Rate Limiting Exploit
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Thu, 06 Feb 2025 05:54:29 GMT
════════════════════════
⌗ Tags: #bounties #rate_limit_bypass #bug_bounty_writeup #improper_access_control #secrets
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Thu, 06 Feb 2025 05:54:29 GMT
════════════════════════
⌗ Tags: #bounties #rate_limit_bypass #bug_bounty_writeup #improper_access_control #secrets
Medium
💰 $200 Easy Bounty: Improper Rate Limiting Exploit
Hi geeks, it4chis3c (Twitter) came-up with the write-up on Improper Rate Limiting Vulnerability found on one of the target’s internal login…
⤷ Title: CVE-2025-2492: Critical ASUS Router Vulnerability Requires Immediate Firmware Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:33:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #AiCloud #ASUS #CVE_2025_2492 #cybersecurity #firmware update #improper authentication #Remote Access #router security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 00:33:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #AiCloud #ASUS #CVE_2025_2492 #cybersecurity #firmware update #improper authentication #Remote Access #router security
Daily CyberSecurity
CVE-2025-2492: Critical ASUS Router Vulnerability Requires Immediate Firmware Update
ASUS routers have a critical vulnerability (CVE-2025-2492) allowing unauthorized access. Update firmware and strengthen security now.
⤷ Title: How I Registered an Account Using Someone Else’s Email (Without Ever Verifying It)
════════════════════════
𐀪 Author: ASC Lages
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 02:48:17 GMT
════════════════════════
⌗ Tags: #improper_authentication #bugbounty_story #authentication_bypass #api_security
════════════════════════
𐀪 Author: ASC Lages
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 02:48:17 GMT
════════════════════════
⌗ Tags: #improper_authentication #bugbounty_story #authentication_bypass #api_security
Medium
🔐 How I Registered an Account Using Someone Else’s Email (Without Ever Verifying It)
Assalamwalaikum wr wb, Greetings ! 🙏 It’s me again guys,….. 😁
⤷ Title: Breaking Boundaries: Vertical Privilege Escalation to Admin via Insecure Direct Request
════════════════════════
𐀪 Author: Asad Ullah Evan
════════════════════════
ⴵ Time: Tue, 27 May 2025 17:32:30 GMT
════════════════════════
⌗ Tags: #hunting #web_penetration_testing #privilege_escalation #bug_bounty #improper_access_control
════════════════════════
𐀪 Author: Asad Ullah Evan
════════════════════════
ⴵ Time: Tue, 27 May 2025 17:32:30 GMT
════════════════════════
⌗ Tags: #hunting #web_penetration_testing #privilege_escalation #bug_bounty #improper_access_control
Medium
Breaking Boundaries: Vertical Privilege Escalation to Admin via Insecure Direct Request
I’m excited to share a recent finding during a web application penetration test. The application was fully API-based, and during my…
⤷ Title: Leak of Internal Reference Name at Multiple Locations.
════════════════════════
𐀪 Author: xploiterr
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 23:15:29 GMT
════════════════════════
⌗ Tags: #improper_access_control #bug_bounty #bugbounty_tips
════════════════════════
𐀪 Author: xploiterr
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 23:15:29 GMT
════════════════════════
⌗ Tags: #improper_access_control #bug_bounty #bugbounty_tips
Medium
Leak of Internal Reference Name at Multiple Locations.
Hi Everyone,
⤷ Title: QNAP Patches Critical Flaw (CVE-2025-52856) with CVSS 9.3
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 Aug 2025 18:15:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_52856 #CVE_2025_52861 #cybersecurity #improper authentication #NVR #Path Traversal #QNAP #QVR #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 Aug 2025 18:15:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_52856 #CVE_2025_52861 #cybersecurity #improper authentication #NVR #Path Traversal #QNAP #QVR #Vulnerability
Daily CyberSecurity
QNAP Patches Critical Flaw (CVE-2025-52856) with CVSS 9.3
QNAP has patched a critical improper authentication flaw (CVE-2025-52856) in its QVR firmware with a CVSS score of 9.3, allowing remote attackers to bypass security.
⤷ Title: API9:2023 — Improper Inventory Management
════════════════════════
𐀪 Author: Apifort
════════════════════════
ⴵ Time: Tue, 23 Sep 2025 07:38:11 GMT
════════════════════════
⌗ Tags: #api_security #cybersecurity #apifort #owasp_api_security_top_10 #improper_inventory
════════════════════════
𐀪 Author: Apifort
════════════════════════
ⴵ Time: Tue, 23 Sep 2025 07:38:11 GMT
════════════════════════
⌗ Tags: #api_security #cybersecurity #apifort #owasp_api_security_top_10 #improper_inventory
Medium
🔍 API9:2023 — Improper Inventory Management
API Güvenliğinde Envanter Yönetiminin Kritik Rolü
⤷ Title: GitLab Patches High Runner Hijacking Flaw (CVE-2025-11702) and Multiple DoS Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Oct 2025 09:20:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #CVE_2025_11702 #dos #gitlab #Improper Access Control #Runner Hijacking #security patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Oct 2025 09:20:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #CVE_2025_11702 #dos #gitlab #Improper Access Control #Runner Hijacking #security patch
Daily CyberSecurity
GitLab Patches High Runner Hijacking Flaw (CVE-2025-11702) and Multiple DoS Vulnerabilities
GitLab patched a critical runner hijacking flaw (CVE-2025-11702) allowing authenticated users to compromise CI/CD pipelines, plus three unauthenticated DoS vulnerabilities.
⤷ Title: Elastic Patches High-Severity Privilege Escalation Flaw in Elastic Cloud Enterprise (CVE-2025-37736)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 00:00:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API Bypass #CVE_2025_37736 #ECE #Elastic #Improper Authorization #privilege escalation #Readonly User
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 00:00:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API Bypass #CVE_2025_37736 #ECE #Elastic #Improper Authorization #privilege escalation #Readonly User
Daily CyberSecurity
Elastic Patches High-Severity Privilege Escalation Flaw in Elastic Cloud Enterprise (CVE-2025-37736)
Elastic patched a Critical EoP flaw (CVE-2025-37736) in ECE (v3.8.3/4.0.3) where the readonly user can create admin users and inject new API keys by bypassing authorization checks.