31 | How a misconfigured Lotus Domino Server can lead to Disclosure of PII Data of Employees, Configuration Details about the Active Directory, etc |
Lotus Domino
Security misconfiguration
Information disclosure |
NA |
Aayush Vishnoi (@AayushVishnoi10) |
Bug Bounty | 2023-06-04 | 2023-06-13 |
30 | AWS Chain Attack- Thousands of Vulnerable EKS Clusters |
AWS Kubernetes
EKS
Container escape
Security misconfiguration |
NA |
Chen Shiri (@ChenShiri73) |
Bug Bounty | 2023-06-04 | 2023-06-13 |
29 | Breaking TikTok: Our Journey to Finding an Account Takeover Vulnerability |
XSS
Account takeover
OAuth |
TikTok |
mrhavit |
Bug Bounty | 2023-06-04 | 2023-06-13 |
28 | Send email from anyone to any(user outlook Microsoft) |
Open mail relay
Email spoofing
SMTP
SPF bypass |
Microsoft |
Abbas Heybati (@abbas_heybati) |
Bug Bounty | 2023-06-04 | 2023-06-13 |
27 | Bypassing CSP via DOM clobbering |
DOM Clobbering
CSP bypass |
NA |
Gareth Heyes (@garethheyes) |
Bug Bounty | 2023-06-05 | 2023-06-13 |
26 | Storing Passwords - A Journey Of Common Pitfalls |
Pass-the-Hash
Authentication flaw
Security code review |
STARFACE |
RedTeam Pentesting (@RedTeamPT) |
Bug Bounty | 2023-06-05 | 2023-06-13 |
25 | A short white box code audit of avo |
Stored XSS
DoS |
Avo |
Paul Werther |
Bug Bounty | 2023-06-05 | 2023-06-13 |
24 | Multiple vulnerabilities in Delmia Apriso 2017 to 2022 |
Insecure deserialization
RCE
SSRF
Reflected XSS |
Dassault Systèmes (Delmia Apriso) |
Mehdi Elyassa |
Bug Bounty | 2023-06-05 | 2023-06-13 |
23 | CVE-2022-32902: Patch One Issue and Introduce Two |
TCC bypass
Local Privilege Escalation |
Apple (macOS) |
Mickey Jin (@patch1t) |
Bug Bounty | 2023-06-06 | 2023-06-13 |
22 | SSD Advisory – Roundcube MarkAsJunk RCE |
RCE
OS command injection
Security code review |
Roundcube |
Selim Enes Karaduman (@Enesdex) |
Bug Bounty | 2023-06-06 | 2023-06-13 |
13 | The Ultimate OSCP Preparation Guide |
OSCP |
Offensive Security |
johnjhacking |
Certification Journey | 2017-08-17 | 2023-07-10 |
7 | Jan's "Path to OSCP" Videos |
OSCP |
Offensive Security |
Jan Wikholm |
Certification Journey | 2016-02-14 | 2023-07-10 |
6 | n3ko1's OSCP Guide |
OSCP |
Offensive Security |
@n3ko1 |
Certification Journey | 2015-03-27 | 2023-07-10 |
5 | How to prepare for PWK/OSCP, a noob-friendly guide |
OSCP |
Offensive Security |
@abatchy |
Certification Journey | 2017-03-04 | 2023-07-10 |
4 | Luke’s Ultimate OSCP Guide - Part 3 |
OSCP |
Offensive Security |
@hakluke |
Certification Journey | 2018-03-21 | 2023-07-10 |
3 | Luke’s Ultimate OSCP Guide - Part 2 |
OSCP |
Offensive Security |
@hakluke |
Certification Journey | 2018-02-16 | 2023-07-10 |
2 | Luke’s Ultimate OSCP Guide - Part 1 |
OSCP |
Offensive Security |
@hakluke |
Certification Journey | 2018-02-15 | 2023-07-10 |