⚡Dependency Confusion via JS Miner

@GodfatherOrwa just landed a clean P1 by leveraging JS Miner in Burp Suite 🔥

Here’s how it went down 👇

🧩 After crawling all endpoints, he went to:
Target ➝ Extensions ➝ JS Miner ➝ Run All Passive Scans

💥 That’s when he spotted: [JS Miner] Dependency Confusion
The vulnerable package was unclaimed on NPM 👀

📦 Next steps he followed:

npm login
mkdir <package-name> && cd <package-name>
npm init -y
npm publish --access public

After claiming the package, he injected an RCE payload via package.json
🧪 Full POC: github.com/orwagodfather/NPM-RCE

💣 Result? A solid P1 vulnerability and a perfect example of how effective Dependency Confusion still is.

Props to @GodfatherOrwa for consistently dropping fire techniques 🔥

🔍 Bug Bounty Web Checklist
✅Track your web pentesting progress by checking each subcategory.
👉https://nemocyberworld.github.io/BugBountyCheckList/

Grab all the GF Patterns from different Repositories at one shot !! 🔥

*Link* : https://github.com/thecybertix/GF-Patterns

✅shosubgo - Small tool to Grab subdomains using Shodan API
⚡https://github.com/incogbyte/shosubgo

Names don’t matter. Bounty does.

✅MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.

⚡https://github.com/midoxnet/mapperplus

🚨 CVE-2025-41646 -
Critical Auth Bypass in RevPi Webstatus (≤ v2.4.5) 🚨
⚠️ Impacts ICS/OT environments – high risk!

🛠️ Root Cause:
Backend uses weak equality comparison, accepting a JSON boolean true instead of a password hash.

🧪 PoC:
Send this in a login request:

{ "hashcode": true }

✅ Result: You get full access without valid credentials!

🔒 Fix: Upgrade to v2.4.6 – patch removes weak comparison logic.

🎯 Bug bounty takeaway:
Always test for type juggling and loose equality bugs in login flows, especially in OT/ICS systems where patch cycles are slower.

CVE-2025-49826: DoS in Next.js, 7.5 rating❗️

A vulnerability in some versions of the Next.js framework allows attackers to perform cache poisoning, leading to a denial of service.

Search at Netlas.io:
👉 Link: https://nt.ls/raJ1k
👉 Dork: http.headers.x_powered_by:"Next.js"

Read more: https://github.com/vercel/next.js/security/advisories/GHSA-67rr-84xm-4c7r