| | Searchlight Cyber Acquires Assetnote to Enhance Continuous Threat Exposure Mgmt (assetnote.io) |
|
1 point by xn--yt9h 3 months ago | past
|
| | Insecurity Through Censorship: Vulnerabilities Caused by the Great Firewall (assetnote.io) |
|
2 points by pentestercrab 7 months ago | past | 1 comment
|
| | Insecurity Through Censorship: Vulnerabilities Caused by the Great Firewall (assetnote.io) |
|
3 points by based2 7 months ago | past | 1 comment
|
| | Insecurity Through Censorship: Vulnerabilities Caused by the Great Firewall (assetnote.io) |
|
8 points by breakingcups 7 months ago | past
|
| | Insecurity Through Censorship: Vulnerabilities Caused by the Great Firewall (assetnote.io) |
|
4 points by pentestercrab 7 months ago | past
|
| | Chaining Three Bugs to Access All Your ServiceNow Data (assetnote.io) |
|
2 points by albinowax_ 10 months ago | past
|
| | Digging for SSRF in NextJS Apps (assetnote.io) |
|
1 point by arkadiyt on May 10, 2024 | past
|
| | Detection and Exploitation of Ivanti's Pulse Connect Secure RCE (assetnote.io) |
|
1 point by albinowax_ on Jan 19, 2024 | past
|
| | Leaking File Contents with a Blind File Oracle in Flarum (assetnote.io) |
|
1 point by skilled on Aug 29, 2023 | past
|
| | Encrypted Doesn't Mean Authenticated (assetnote.io) |
|
2 points by dgudkov on July 27, 2023 | past
|
| | Exploiting an Order of Operations Bug to Achieve RCE in Oracle Opera (assetnote.io) |
|
1 point by arkadiyt on May 1, 2023 | past
|
| | Exploiting Static Site Generators: When Static Is Not Static (assetnote.io) |
|
2 points by walterbell on Nov 2, 2022 | past
|
| | Exploiting Static Site Generators: When Static Is Not Static (assetnote.io) |
|
21 points by infosecau on Nov 1, 2022 | past
|
| | Abusing functionality to exploit a super SSRF in Jira Server (CVE-2022-26135) (assetnote.io) |
|
1 point by infosecau on July 6, 2022 | past
|
| | Cloudflare Pages, part 2: The two privescs (assetnote.io) |
|
1 point by creativedg on May 7, 2022 | past
|
| | Cloudflare Pages, part 2: The two privescs (assetnote.io) |
|
1 point by tomwas54 on May 6, 2022 | past | 1 comment
|
| | Cloudflare Pages, part 1: The fellowship of the secret (assetnote.io) |
|
28 points by infosecau on May 6, 2022 | past | 2 comments
|
| | Hacking a Bank by Finding a 0day in DotCMS (assetnote.io) |
|
3 points by infosecau on May 5, 2022 | past
|
| | Eliminating Dangling Elastic IP Takeovers with Ghostbuster (assetnote.io) |
|
2 points by infosecau on Feb 15, 2022 | past
|
| | Eliminating Dangling Elastic IP Takeovers with Ghostbuster (assetnote.io) |
|
1 point by arkadiyt on Feb 14, 2022 | past
|
| | Solarwinds Web Help Desk: When the Helpdesk Is Too Helpful (assetnote.io) |
|
1 point by caaqil on Jan 25, 2022 | past
|
| | Turning Bad SSRF to Good SSRF: Websphere Portal (assetnote.io) |
|
2 points by infosecau on Dec 28, 2021 | past
|
| | Discovering Full Read SSRF in Jamf (CVE-2021-39303 and CVE-2021-40809) (assetnote.io) |
|
3 points by arkadiyt on Nov 30, 2021 | past
|
| | Exploiting GraphQL (assetnote.io) |
|
2 points by infosecau on Aug 30, 2021 | past
|
| | Taking over Uber accounts through voicemail (assetnote.io) |
|
15 points by infosecau on July 4, 2021 | past | 5 comments
|
| | Contextual Content Discovery: You've forgotten about the API endpoints (assetnote.io) |
|
3 points by arkadiyt on April 9, 2021 | past
|
| | H2C Smuggling in the Wild (assetnote.io) |
|
3 points by arkadiyt on March 23, 2021 | past
|
| | A Glossary of Blind SSRF Chains (assetnote.io) |
|
2 points by simonpure on Jan 30, 2021 | past
|
| | A Glossary of Blind SSRF Chains (assetnote.io) |
|
1 point by arkadiyt on Jan 15, 2021 | past
|
| | A Glossary of Blind SSRF Chains (assetnote.io) |
|
2 points by wglb on Jan 14, 2021 | past
|
|
|
More |