Skip to content
September 23, 2026
☍ CyberNoz
  • Home
Home›Mix›[www.32red.com] Reverse proxy misconfiguration leads to 1-click account takeover
Mix

[www.32red.com] Reverse proxy misconfiguration leads to 1-click account takeover

Cybernoz
April 3, 2023 1 min read
Share X / Twitter LinkedIn Reddit WhatsApp Email



Kindred Group disclosed a bug submitted by sw33tlie: https://hackerone.com/reports/1632973 – Bounty: $5250



Source link

Share X / Twitter LinkedIn Reddit WhatsApp Email
« Previous
WinRAR SFX archives can run PoweShell without being detected
Next »
Western Digital shuts systems due to Cyber Attack

Related Articles

All Mix →
3 Ways Hacker Powered Security Helps the Agile CISO Mix

3 Ways Hacker-Powered Security Helps the Agile CISO

Security teams are challenged by the radical shifts in software development, from the fast pace and frequent releases to new languages and modern models. In…

May 11, 2023 Cybernoz 4 min read
Hacking for Good HackerOne Mix

Announcing the Largest DoD Bug Bounty Challenge Ever: Hack the Air Force

The Air Force is asking hackers to take their best shot following the success of Hack the Pentagon and Hack the Army bug bounty challenges.…

May 27, 2023 Cybernoz 1 min read
Hackerone logo Mix

DORA Compliance Is Here: What Financial Entities Should Know

Table of Contents What Does DORA Regulate? What Does DORA Aim to Achieve? What Are DORA’s Security Requirements? How Does a Covered Financial Entity Demonstrate…

February 3, 2025 Cybernoz 3 min read
New burp suite api we want your feedback blog Mix

New Burp Suite API: we want your feedback! | Blog

Sean Burns | 08 December 2022 at 10:45 UTC If you follow the Burp Suite roadmap, then you’ll know that we’re working on a complete…

March 30, 2023 Cybernoz 2 min read
Remote Access to Every Conversation · Joseph Thacker Mix

Remote Access to Every Conversation · Joseph Thacker

Table of Contents The Admin Panel Their Response Timeline Industry Thoughts My neighbor texted me the other day and said she’d pre-ordered two AI toys…

January 29, 2026 Cybernoz 5 min read
CWE Common Weakness Enumeration and the CWE Top 25 Explained Mix

CWE (Common Weakness Enumeration) and the CWE Top 25 Explained

Table of Contents What Is the CWE Top 25? CWE Examples: Which Are the Most Dangerous CWEs? Invalid Input Validation (CWE-20) Out-of-Bounds Reading (CWE-125) Incorrect…

April 25, 2023 Cybernoz 6 min read

Latest Posts

  • Wiz AI-SPM now supports OpenAI platform
  • 2022 Elastic Global Threat Report: Helping security leaders navigate today’s threat landscape
  • Sweden fines Miljödata $183,000 over breach affecting 2.2 million
  • Hackers Exploiting F5 BIG-IP OAuth Server 0-day Flaw to Gain Remote Code Execution
  • Hackers Exploit Veeam Agent Vulnerability to Gain SYSTEM-Level Access on Windows
  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
☍ CyberNoz

Cybersecurity News

  • Agbi
  • ArsTechnica
  • AttackDefense
  • Australiancybersecuritymagazine
  • Bankinfosecurity
  • Bleeping Computer
  • CISOOnline
  • CloudSecurity
  • ComputerWeekly
  • Crowdstrike
  • Cyber Security Ventures
  • CyberDefenseMagazine
  • CyberNews
  • Cyberscoop
  • CyberSecurity-Insiders
  • CyberSecurityDive
  • CyberSecurityNews
  • CyberWire
  • DarkReading
  • ExploitOne
  • GBHackers
  • Genel
  • HackerCombat
  • HackRead
  • HelpnetSecurity
  • IndustrialCyber
  • InfoSecurity
  • ITnews
  • ITSecurityGuru
  • Krebson
  • MalwareBytes
  • Mix
  • OTSecurity
  • PortSwigger
  • Rapid7
  • SCMP
  • securelist
  • Securityaffairs
  • SecurityWeek
  • techcrunch
  • TheCyberExpress
  • TheHackerNews
  • ThreatIntelligence-IncidentResponse
  • Tldrsec
  • Unit42
  • VendorResearch
  • welivesecurity
  • Wired
  • Zerosalarium
Archive
  • September 2026
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2026
  • August 2026
  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • July 2025
  • June 2025
  • May 2025
  • April 2025
  • March 2025
  • February 2025
  • January 2025
  • December 2024
  • November 2024
  • October 2024
  • September 2024
  • August 2024
  • July 2024
  • June 2024
  • May 2024
  • April 2024
  • March 2024
  • February 2024
  • January 2024
  • December 2023
  • November 2023
  • October 2023
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
© 2026 Cybernoz. All rights reserved.