
TikTok disclosed a bug submitted by h4x0r_dz: https://hackerone.com/reports/1890284 – Bounty: $2500

Source link
Related Articles
All Mix →Newly added security tests, June 21, 2017: XSS and SQL injection modules
To bring you the most up-to-date security service and help you stay on top of threats, we update Detectify on a regular basis. Here are…
7 Common Security Pitfalls to Avoid When Migrating to the Cloud
Table of Contents 7 Common Security Pitfalls to Avoid When Migrating to the Cloud Exposing sensitive information Leaking Credentials Lack of clear policies (and enforcing…
Exploiting JWT vulnerabilities to achieve RCE
At Intigriti, we host monthly web-based Capture The Flag (CTF) challenges as a way to engage with the security research community. This month, we’ve decided…
Detectify security updates for 15 November
Table of Contents WordPress limit-login-attempts XSS Expect-CT / Invalid Directive Spring Boot Path Traversal One vulnerability leads to another… Spring Boot / Health Route Exposure…
Content Security Policy (CSP) explained including common bypasses
Table of Contents Example policy self inline eval Callback CDN – anyone can upload files CDN – abusing existing libraries Injection in the actual policy…
How to Include WordPress Components in Your Custom Web Pages
Table of Contents The Wrong Way The Right Way Links Ever wanted to take a piece of WordPress > functionality and put it in a…