漏洞报告 GitLab #1196958 Clipboard DOM-based XSS #790634 When you call your branch the same name as a git hash, it could be checked out by dependents Glassdoor #1265390 Reflected XSS on https://www.glassdoor.com/job-listing/spotlight MTN Group #1182016 Email verification bypassed during sing up (https://developers.mtn.com/profile) #1069105 2x Remote file inclusion within your VMware Instances U.S. Dept Of Defense [#1278050 CVE-2021-29156 on ForgeRock OpenAm] LDAP Injection in Webfinger Protocol! #1173598 S3 bucket listing/download [#1277383 XSS due to CVE-2020-3580 ███.mil] #1244403 CUI labled and ████ and ██████ Restricted ██████ intelligence #1252282 XSS on ███ 挖洞技巧 How I Found a Credential Exposure Bug on BBC. | by Anirudh Srinivas Balaji | Aug, 2021 | Medium https://starlabs.sg/blog/2021/08/identifying-bugs-in-router-firmware-at-scale-with-taint-analysis 工具推荐 bats3c/shad0w: A post exploitation framework designed to operate covertly on heavily monitored environments samolego/GolfIV: An anti-exploit attempt for Fabric waleedassar/CVE-2021-31184

bugbounty技巧聚合20210820

GitLab

Glassdoor

MTN Group

U.S. Dept Of Defense