漏洞报告 Uber #1145428 Chain of vulnerabilities in Uber for Business Vouchers program allows for attacker to perform arbitrary charges to victim's U4B payment acc a ount Rockstar Games #1278072 Brute Force against VMware Horizon Acronis #962889 SQL Injection in agent-manager Shopify #1267677 Improper Input Validation on https://oberlo-image-proxy.shopifycloud.com/ UPchieve #1301113 CLICKJACKING LEADS TO DEACTIVATE ACCOUNT Kartpay #1082521 Full Path Disclosure of Server through 500 Server Error Brave Software #1249056 Brave Browser permanently timestamps & logs connection times for all v2 domains ~/.config/BraveSoftware/Brave-Browser/tor/data/tor.log Elastic #998398 Prototype Pollution leads to XSS on https://blog.swiftype.com/# proto [ asd]=alert(document.domain) MTN Group #1060541 No rate limit lead to otp brute forcing #1060518 No rate limit in otp code sending 挖洞技巧 Holy FFUF! — A Beginner Guide to Fuzz with FFUF | by MikeChan | Aug, 2021 | Medium The Complete Guide to Prototype Pollution Vulnerabilities How to Hack Apple ID. Everyone knows what’s inside a computer… | by Zemnmez | Aug, 2021 | Medium 工具推荐 Ralireza/Android-Security-Teryaagh: Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

bugbounty技巧聚合20210817

Uber

Rockstar Games

Acronis

Shopify

UPchieve

Kartpay

Brave Software

#1249056 Brave Browser permanently timestamps & logs connection times for all v2 domains ~/.config/BraveSoftware/Brave-Browser/tor/data/tor.log

Elastic

MTN Group