PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus,etc
github.com/shadowsock5/Poc
github.com/shadowsock5/Poc
❤6👍3
☄️ Exciting News for Aspiring Bug Hunters! ☄️
💥 Enrollments are now open for Brut Ethical Hacking and Basic to Advanced Web Penetration Testing (Bug Bounty) courses, starting January 2025!
Course Highlights:
• Comprehensive training on Business Logic, SQL Injection, and more.
• 40 hours of live, online sessions.
• Practical, hands-on exercises to master real-world vulnerabilities.
• Pathway to becoming a skilled bug hunter and advancing your cybersecurity career.
🗓 Classes Begin: January 2025 (PAID COURSE)
📞 Contact: Whatsapp for details and enrollment.
🌐 Visit: Brut Security
💥 Enrollments are now open for Brut Ethical Hacking and Basic to Advanced Web Penetration Testing (Bug Bounty) courses, starting January 2025!
Course Highlights:
• Comprehensive training on Business Logic, SQL Injection, and more.
• 40 hours of live, online sessions.
• Practical, hands-on exercises to master real-world vulnerabilities.
• Pathway to becoming a skilled bug hunter and advancing your cybersecurity career.
Please open Telegram to view this post
VIEW IN TELEGRAM
WhatsApp.com
Brut Security
Business Account
❤6👍1
CVE-2025-21598: Out-of-bounds Read in Juniper Junos OS, 8.2 rating❗️
An out-of-bouds read vulnerability in the RDP daemon, fixed last week, could potentially lead to DoS.
Search at Netlas.io:
👉 Link: https://nt.ls/HqWq2
👉 Dork: http.title:"Juniper"
Vendor's advisory: https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-When-BGP-traceoptions-are-configured-receipt-of-malformed-BGP-packets-causes-RPD-to-crash-CVE-2025-21598
An out-of-bouds read vulnerability in the RDP daemon, fixed last week, could potentially lead to DoS.
Search at Netlas.io:
👉 Link: https://nt.ls/HqWq2
👉 Dork: http.title:"Juniper"
Vendor's advisory: https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-When-BGP-traceoptions-are-configured-receipt-of-malformed-BGP-packets-causes-RPD-to-crash-CVE-2025-21598
👍3
💻 All About Bug Bounty - Updated!
🔥https://github.com/daffainfo/AllAboutBugBounty
#BugBounty #bugbountytips
🔥https://github.com/daffainfo/AllAboutBugBounty
#BugBounty #bugbountytips
1❤14👍4🔥2
CVE-2025-0066, -0070 and other: Multiple vulnarabilities in SAP, 2.2 - 9.9 rating 🔥🔥🔥
Several vulnerabilities in SAP services for every taste and color: SQLi, Improper Authentication, DLL Hijacking, etc.
Search at Netlas.io:
👉 Link: https://nt.ls/zbP5e
👉 Dork: http.headers.server:"SAP"
Vendor's advisory: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/january-2025.html
Several vulnerabilities in SAP services for every taste and color: SQLi, Improper Authentication, DLL Hijacking, etc.
Search at Netlas.io:
👉 Link: https://nt.ls/zbP5e
👉 Dork: http.headers.server:"SAP"
Vendor's advisory: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/january-2025.html
👍9
Exploiting Leaked Zoom Meeting Links via Wayback Machine.pdf
85.1 KB
💡 Bug Bounty Tip: Exploiting Leaked Zoom Meeting Links via Wayback Machine
💰 Credit: Shivam Kumar Singh
💰 Credit: Shivam Kumar Singh
🔥13👍4🗿1
Please open Telegram to view this post
VIEW IN TELEGRAM
boom-stinger-c76 on Notion
Authentication Bypass | Notion
Exposing the Lethal Power of the Refresh Token
❤24🔥10👍4🗿2
Where is the reaction guys? It's a good way to support the channel, so please do leave your reaction to grow this community. Thanks!
❤54🔥13👍10🫡5🗿5
Course Highlights
What You’ll Learn
Personalized attention with small batch sizes
Industry-relevant curriculum designed for practical application
Trilingual instruction to ensure clear understanding
Realtime Mentorship, Job Assistance and Post Support
Please open Telegram to view this post
VIEW IN TELEGRAM
1🔥4👍3❤1
This media is not supported in your browser
VIEW IN TELEGRAM
☄️CVE-2024-49138 - Windows Common Log File System Driver Elevation of Privilege Vulnerability
⚠️ https://github.com/MrAle98/CVE-2024-49138-POC
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥8🤝2
CVE-2024-12365: Missing Authorization in W3 Total Cache WordPress Plugin, 8.5 rating❗️
The vulnerability allows an authenticated attacker to access sensitive data and make unauthorized web requests to collect information from internal services.
Search at Netlas.io:
👉 Link: https://nt.ls/BpOAJ
👉 Dork: http.body:"plugins/w3-total-cache"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/w3-total-cache/w3-total-cache-281-authenticated-subscriber-missing-authorization-to-server-side-request-forgery
The vulnerability allows an authenticated attacker to access sensitive data and make unauthorized web requests to collect information from internal services.
Search at Netlas.io:
👉 Link: https://nt.ls/BpOAJ
👉 Dork: http.body:"plugins/w3-total-cache"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/w3-total-cache/w3-total-cache-281-authenticated-subscriber-missing-authorization-to-server-side-request-forgery
👍6🔥1