Elastic
#1266188 Critical || Unrestricted access to private Github repos and properties of Elastic through leaked token of Elastic employee
Semrush
#1237700 Improper input validation in projects leads to fully deny access to project resources
Logitech
#1178239 session takeover via open protocol redirection on streamlabs.com
GrrrDog/weird_proxies: Reverse proxies cheatsheet
【续集】 Weird proxies/2 and a bit of magic - Speaker Deck
Go Fuzz Yourself – How to Find More Vulnerabilities in APIs Through Fuzzing [Whitepaper download] | Detectify Labs
CVE-2021-26084 - CVE.report
【版本更新】https://github.com/PortSwigger/turbo-intruder