Write-ups

Check The Published Writeups

Reset
WDBTitleTagsProgramsAuthorsTypePublicationAdded
4144Leaking OpenID tokens with “ — the bug right infront of you OpenID Connect Open redirect Token leak NA Zseano (@zseano) Bug Bounty2019-05-212023-06-13
3059CVE-2020-13294 Authentication flaw OpenID Connect OAuth GitLab Lauritz Holtmann (@_lauritz_) Bug Bounty2020-11-012023-06-13
197User impersonation via stolen UUID code in KeyCloak (CVE-2023-0264) OAuth OpenID Connect Privilege escalation Authentication flaw Keycloack Jordi Zayuelas i Muñoz Bug Bounty2023-04-142023-06-13
189Identifying vulnerabilities in GitHub Actions & AWS OIDC Configurations CI/CD OpenID Connect AWS Rojan Rijal (@uraniumhacker) Bug Bounty2023-04-182023-06-13
178Vulnerability Spotlight: CVE-2023-0264 OpenID Connect OAuth Authentication flaw Privilege escalation Security code review Keycloack Timo Müller (@mtimo44) Bug Bounty2023-04-192023-06-13
131Exploiting misconfigured Google Cloud Service Accounts from GitHub Actions OpenID Connect Cloud CI/CD NA Revblock (@revbl0ck) Bug Bounty2023-05-022023-06-13
85From GitHub To Account Takeover: Misconfigured Actions Place GCP & AWS Accounts At Risk Account takeover Cloud OpenID Connect CI/CD NA Rezonate Bug Bounty2023-05-162023-06-13