GitHub Security Lab CWE-918: Added URLClassLoader and WebClient SSRF sinks CWE 295 - Insecure TrustManager - MiTM JShell Injection CWE-665 Insecure environment during RMI/JMX Server initialisation - All for one bounty https://hackerone.com/reports/1250320 Google Stored XSS in Google Doubleclick Studio Zoom Part 1: Dive into Zoom Applications Part 2: Dive into Zoom Applications Nextcloud User deletion is not handled properly everywhere Scoped apptokens can be changed by that very apptoken Others Remote code execution in cdnjs of Cloudflare IDOR to information disclosure + Admin Account Takeover

火线Zone信息流20210716

GitHub Security Lab

Google

Zoom

Nextcloud

Others