漏洞报告 Visual Studio advisories/2021_vscode_ipynb_xss_arbitrary_file_read.md at master · justinsteven/advisories Mail.ru [#968402 http://kiwi.youdrive.today/] Information disclosure via Kiwi TCMS vulnerability https://hackerone.com/reports/836149 #1214814 uchi.ru check_lessons Blind SQL Injection https://hackerone.com/reports/1166996 Basecamp [#1253926 Domain Takeover 3737signals.com] TikTok #1249050 Information Disclosure on TikTok Unplugged Site MTN Group #1069531 Blind SQL Injection #1061199 Reflected XSS on play.mtn.co.za The Internet #893922 IP-in-IP protocol routes arbitrary traffic by default - CVE-2020-10136 GitLab #1122408 CSRF on /api/graphql allows executing mutations through GET requests Valve #1295844 Modify in-flight data to payment provider Smart2Pay 工具推荐 cyberheartmi9/Proxyshell-Scanner: nuclei scanner for proxyshell ( CVE-2021-34473 ) 挖洞技巧 ; echo "Shell Injection"

bugbounty技巧聚合20210816

Visual Studio

Mail.ru

Basecamp

TikTok

MTN Group

The Internet

GitLab

Valve