⤷ Title: Improper Authentication in a famous Trading website
════════════════════════
𐀪 Author: Anonymousshetty
════════════════════════
ⴵ Time: Tue, 14 Jan 2025 14:59:48 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ethical_hacking #improper_access_control #bug_bounty_tips
════════════════════════
𐀪 Author: Anonymousshetty
════════════════════════
ⴵ Time: Tue, 14 Jan 2025 14:59:48 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ethical_hacking #improper_access_control #bug_bounty_tips
Medium
Improper Authentication in a famous Trading website
**disclaimer: please take permission before testing any website and do not perform actions without understanding its impact ;)
⤷ Title: $200 Easy Bounty: Improper Rate Limiting Exploit
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Thu, 06 Feb 2025 05:54:29 GMT
════════════════════════
⌗ Tags: #bounties #rate_limit_bypass #bug_bounty_writeup #improper_access_control #secrets
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Thu, 06 Feb 2025 05:54:29 GMT
════════════════════════
⌗ Tags: #bounties #rate_limit_bypass #bug_bounty_writeup #improper_access_control #secrets
Medium
💰 $200 Easy Bounty: Improper Rate Limiting Exploit
Hi geeks, it4chis3c (Twitter) came-up with the write-up on Improper Rate Limiting Vulnerability found on one of the target’s internal login…
⤷ Title: Breaking Boundaries: Vertical Privilege Escalation to Admin via Insecure Direct Request
════════════════════════
𐀪 Author: Asad Ullah Evan
════════════════════════
ⴵ Time: Tue, 27 May 2025 17:32:30 GMT
════════════════════════
⌗ Tags: #hunting #web_penetration_testing #privilege_escalation #bug_bounty #improper_access_control
════════════════════════
𐀪 Author: Asad Ullah Evan
════════════════════════
ⴵ Time: Tue, 27 May 2025 17:32:30 GMT
════════════════════════
⌗ Tags: #hunting #web_penetration_testing #privilege_escalation #bug_bounty #improper_access_control
Medium
Breaking Boundaries: Vertical Privilege Escalation to Admin via Insecure Direct Request
I’m excited to share a recent finding during a web application penetration test. The application was fully API-based, and during my…
⤷ Title: Leak of Internal Reference Name at Multiple Locations.
════════════════════════
𐀪 Author: xploiterr
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 23:15:29 GMT
════════════════════════
⌗ Tags: #improper_access_control #bug_bounty #bugbounty_tips
════════════════════════
𐀪 Author: xploiterr
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 23:15:29 GMT
════════════════════════
⌗ Tags: #improper_access_control #bug_bounty #bugbounty_tips
Medium
Leak of Internal Reference Name at Multiple Locations.
Hi Everyone,
⤷ Title: GitLab Patches High Runner Hijacking Flaw (CVE-2025-11702) and Multiple DoS Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Oct 2025 09:20:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #CVE_2025_11702 #dos #gitlab #Improper Access Control #Runner Hijacking #security patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Oct 2025 09:20:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #CVE_2025_11702 #dos #gitlab #Improper Access Control #Runner Hijacking #security patch
Daily CyberSecurity
GitLab Patches High Runner Hijacking Flaw (CVE-2025-11702) and Multiple DoS Vulnerabilities
GitLab patched a critical runner hijacking flaw (CVE-2025-11702) allowing authenticated users to compromise CI/CD pipelines, plus three unauthenticated DoS vulnerabilities.
⤷ Title: Critical Dell Data Lakehouse Vulnerability (CVE-2025-46608) Allows Privilege Escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 01:47:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Vulnerability #CVE_2025_46608 #Dell Data Lakehouse #Improper Access Control #privilege escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 01:47:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Vulnerability #CVE_2025_46608 #Dell Data Lakehouse #Improper Access Control #privilege escalation
Daily CyberSecurity
Critical Dell Data Lakehouse Vulnerability (CVE-2025-46608) Allows Privilege Escalation
Dell patched a Critical (CVSS 9.1) flaw (CVE-2025-46608) in Dell Data Lakehouse that allows a high-privileged remote attacker to escalate privileges and gain unauthorized administrative control. Update to v1.6.0.0.
⤷ Title: Under Active Attack: Critical 9.1 CVSS FortiClient EMS Flaw Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 04 Apr 2026 01:35:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_35616 #Enterprise Security #exploited in the wild #FortiClient EMS #Fortinet #Hotfix #Improper Access Control #infosec #rce #security patch #zero_day
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 04 Apr 2026 01:35:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_35616 #Enterprise Security #exploited in the wild #FortiClient EMS #Fortinet #Hotfix #Improper Access Control #infosec #rce #security patch #zero_day
Daily CyberSecurity
Under Active Attack: Critical 9.1 CVSS FortiClient EMS Flaw Exploited in the Wild
Security teams are on high alert as Fortinet confirms that a critical vulnerability in its FortiClient EMS (Endpoint Management Server) is currently being leveraged by attackers in active campaign…
⤷ Title: Bug Bounty Journey — Valid Report Part 11
════════════════════════
𐀪 Author: 0xF3r4t
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 18:58:02 GMT
════════════════════════
⌗ Tags: #web_application_security #bug_bounty #improper_access_control #intigriti
════════════════════════
𐀪 Author: 0xF3r4t
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 18:58:02 GMT
════════════════════════
⌗ Tags: #web_application_security #bug_bounty #improper_access_control #intigriti
Medium
Bug Bounty Journey — Valid Report Part 11
In this journey, I will share my experience with a valid report I submitted. This will be a series until I discover new vulnerabilities. 😊…
⤷ Title: How a Throwaway Email Walked Me Into Someone Else’s Tenant — Unauthorized PII Information Access
════════════════════════
𐀪 Author: Thamotharan Vajramani
════════════════════════
ⴵ Time: Wed, 20 May 2026 16:41:42 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #unauthorized_access #improper_access_control #bug_bounty
════════════════════════
𐀪 Author: Thamotharan Vajramani
════════════════════════
ⴵ Time: Wed, 20 May 2026 16:41:42 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #unauthorized_access #improper_access_control #bug_bounty
Medium
How a Throwaway Email Walked Me Into Someone Else’s Tenant — Unauthorized PII Information Access
By Thamotharan Vajramani
⤷ Title: CVE-2026-76310, CVE-2026-76311, CVE-2026-76312: Splunk Embedded Report Flaws (CVSS 9.4) Affect System Integrity
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 03:28:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_76310 #embedded reports #Improper Access Control #security hardening #Splunk #Splunk Enterprise
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 03:28:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_76310 #embedded reports #Improper Access Control #security hardening #Splunk #Splunk Enterprise
Daily CyberSecurity
CVE-2026-76310, CVE-2026-76311, CVE-2026-76312: Splunk Embedded Report Flaws (CVSS 9.4) Affect System Integrity
TL;DR Splunk fixed 60 vulnerabilities in Splunk Enterprise on August 19, 2026. Three critical flaws share a 9.4 score. Each lets an unauthenticated user with an embedded report token access data a…