Статистика Избранное

The Bug Bounty Hunter

@thebugbountyhunter

Гео и язык канала: Весь мир, Английский

Категория: Софт и приложения

Happy hunting!
thebugbountyhunter.com
hello@thebugbountyhunter.com

Связанные каналы | Похожие каналы

Гео и язык канала

Весь мир, Английский

Категория

Софт и приложения

Статистика

Избранное

Фильтр публикаций

Скрывать удаленные

Скрывать репосты

The Bug Bounty Hunter

1 Oct, 16:59

From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities

https://sec-consult.com/blog/detail/from-anyoneicloudcom-spoofing-arbitrary-apple-icloud-identities/

From: anyone@icloud.com - Spoofing Arbitrary Apple iCloud Identities

A case study on discovering two email spoofing vulnerabilities in Apple iCloud.

3.4k 0 26 2

The Bug Bounty Hunter

1 Oct, 00:19

CVE-2026-86950: The Great Glyph Grift
An in-the-wild iOS bug with a possible WhatsApp zero-click path.

https://calif.io/research/the-great-glyph-grift

CVE-2026-86950: The Great Glyph Grift

An in-the-wild iOS bug with a possible WhatsApp zero-click path.

4.2k 1 24 3

The Bug Bounty Hunter

1 Oct, 00:18

0-Day Alert: Apple CoreGraphics RCE exploited in targeted attacks

https://intelligence.zerodayengineering.com/0-day-alert-cve-2026-86950/

⚡️ 0-Day Alert: Apple CoreGraphics RCE exploited in targeted attacks

Update iOS/iPadOS and macOS.

3.8k 1 17 2

The Bug Bounty Hunter

30 Sep, 14:24

From AI Agents to RCE - Building a Vulnerability Research Workflow

https://blog.quarkslab.com/from-ai-agents-to-rce-building-a-vulnerability-research-workflow.html

4.2k 0 64 4

The Bug Bounty Hunter

27 Sep, 11:23

How I Could've Accessed 17 Trillion Microsoft Records

https://blog.faav.net/how-i-couldve-accessed-17-trillion-microsoft-records

How I Could’ve Accessed 17 Trillion Microsoft Records

How one unchecked login token put 17 trillion rows in a Microsoft internal analytics service within reach.

6.1k 1 27 3

The Bug Bounty Hunter

23 Sep, 00:19

SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypass

https://blog.viettelcybersecurity.com/sharepoint_cve-2026-65660/

8.1k 1 49 9

The Bug Bounty Hunter

20 Sep, 11:13

BragJack [Technical Overview]: How We Hijacked Top 5 Browsers' Internal Agents With Just One Single Extension

https://forever.security/blog/bragjack-attack-hijacks-every-browser-agent/

BragJack [Technical Overview]: How We Hijacked Top 5 Browsers' Internal Agents With Just One Single Extension · Forever Security

BragJack attack (discovered by Forever Security) allowed ordinary extensions to hijack the internal browser agent of Comet, Chrome, Edge, Opera, and Claude in Chrome

8.5k 0 19 7

The Bug Bounty Hunter

19 Sep, 20:16

ROOT Tesla OS on QEMU Part 2 :Debugging + fixing

https://cn0xroot.wordpress.com/2026/09/20/root_tesla_os_on_qemu_part_2_debugging_fixing/

ROOT Tesla OS on QEMU Part 2 :Debugging + fixing

7.3k 0 38 5

The Bug Bounty Hunter

19 Sep, 19:31

ROOT Tesla OS on QEMU Part 1 :unpacking

https://cn0xroot.wordpress.com/2026/09/19/root-tesla-os-on-qemu-part-1-unpacking/

ROOT Tesla OS on QEMU Part 1 :unpacking

直接使用真机设备获取ROOT Shell 是一件很艰难的事情，退而求其次使用固件镜像+QEMU 模拟仿真实现获得ROOTShell

6k 0 36 3

The Bug Bounty Hunter

19 Sep, 19:07

geminiHunter

Find and assess exposed Google Gemini API keys in web assets and Android apps.

https://github.com/devploit/geminiHunter

GitHub - devploit/geminiHunter

Contribute to devploit/geminiHunter development by creating an account on GitHub.

5.2k 0 31 7

The Bug Bounty Hunter

18 Sep, 20:15

Click2Shell: Preauth WordPress Core Theme Preview Injection to RCE Chain

https://pwn.ai/blog/click2shell

Click2Shell: Preauth WordPress Core Theme Preview Injection to RCE Chain

A pre-authentication Theme Injection to RCE chain in WordPress Core that allows unauthenticated attackers to achieve remote code execution on any default WordPress installation through a single click.

5.2k 1 37 8

The Bug Bounty Hunter

18 Sep, 09:32

Hacking OpenAI
A heap overflow and SSO misconfiguration to compromise OpenAI internal repositories

https://www.hacktron.ai/blog/hacking-openai

Hacking OpenAI

A heap overflow and SSO misconfiguration to compromise OpenAI internal repositories

5.1k 0 31 9

The Bug Bounty Hunter

18 Sep, 01:12

The Hacker's Guide to Attacking AI Agents

https://darkmarc.substack.com/p/the-hackers-guide-to-attacking-ai

The Hacker's Guide to Attacking AI Agents

This is a practical guide to assessing the security of an agentic AI system.

5.3k 0 74 3

The Bug Bounty Hunter

17 Sep, 23:07

Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858)

https://www.cyera.com/research/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858

Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858)

Cyera Research Labs has discovered a "worst-case scenario" flaw in n8n, the industry-leading platform for AI and workflow automation. Dubbed "Ni8mare," this vulnerability (CVE-2026-21858) allows an unauthenticated remote attacker to gain full administrative control over an n8n instance.

5.2k 1 44 2

The Bug Bounty Hunter

17 Sep, 22:49

Breaking into Google's GFile for $100k

https://bughunters.google.com/blog/breaking-into-googles-gfile-for-100k

Blog: Breaking into Google's GFile for $100k

This post details an attack on Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage.

5.2k 0 22

The Bug Bounty Hunter

15 Sep, 16:15

GitHub issues $100,000 bounty for critical RCE vulnerability disclosed by @sagitz_

https://runtimewire.com/article/github-issues-100-000-bounty-for-critical-rce-vulnerability-disclosed-by-sagitz

GitHub issues $100,000 bounty for critical RCE vulnerability disclosed by @sagitz_

Researcher @sagitz_ disclosed a remote code execution vulnerability in GitHub, earning a $100,000 bounty—the largest payout in the platform's bug bounty program.

6.9k 0 62 24

The Bug Bounty Hunter

13 Sep, 17:42

$15k - CSPT to full account takeover, then 2FA bypass via the prototype chain

https://whoareme.com/blog/cspt-account-takeover-2fa-bypass/

$15k - CSPT to full account takeover, then 2FA bypass via the prototype chain

A client-side path traversal in the front-end's URL builder turned into arbitrary PUT/DELETE on the API, then chained with an inherited-property lookup bug to bypass 2FA

7.4k 0 59 13

The Bug Bounty Hunter

11 Sep, 10:00

Everyone Chains SSTI to RCE. I Chained It to Account Takeover.

https://medium.com/@HariHax/everyone-chains-ssti-to-rce-i-chained-it-to-account-takeover-c279188ff9ce

Everyone Chains SSTI to RCE. I Chained It to Account Takeover.

Three attempts at code execution paid nothing. One template expression that just read a variable paid $1,000.

7.6k 0 41 6

The Bug Bounty Hunter

9 Sep, 11:33

RCE in mexc Android app via Bypass URL validation to access the WebView, JS-Bridge with Path Traversal leads to Native-Library Cache Overwrite.

https://itis911.github.io/writeups/RCE-Mexc-Andriod-App.html

7.9k 0 43

The Bug Bounty Hunter

7 Sep, 09:17

From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for ASP.NET AJAX

https://tantosec.com/blog/2026/09/telerik-padding-oracle-to-shell/

From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for ASP.NET AJAX

TantoSec turned an unauthenticated AES-CBC padding oracle in Telerik UI for ASP.NET AJAX into remote code execution, chaining a decrypt-versus-parse oracle, a predictable HMAC key, and a type-name deserialisation gadget.

8.9k 0 43 14

Показано 20 последних публикаций.

51 280

подписчиков

Статистика канала

Популярное в канале

From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for ASP.NET AJAX https://tantose...

ZeroQuarry is finding security vulnerability chains in AI-reviewed code https://zeroquarry.com/r...

BragJack [Technical Overview]: How We Hijacked Top 5 Browsers' Internal Agents With Just One Sing...

From Zero Credentials to Super Admin: An SSO Authentication Bypass on AT&T https://medium.com/@T...

SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check...