Bug Bounty - Session Takeover in BMW Shops via XSS - HackerOne

Introduction Some programs were made public in HackerOne bug bounty platform last month, including Alibaba Group Bug Bounty Program. After having a look at their program details I’ve noticed the...

Introduction For a long time, Google search is being used by hackers to find specific elements on web applications by building customized queries containing advanced search operators. Using sear...

Introduction The nOAuth vulnerability was originally discovered by Descope security team and impacts Microsoft Azure AD applications configured to use OAuth. Essentially the vulnerability is a ...