Apache Solr Authentication Bypass (CVE-2024-45216): Vulnerability Details, Exploits & Mitigation
Description of CVE-2024-45216 (Apache Solr Auth Bypass) Improper Authentication vulnerability in Apache […]
Recon
CVE-2024-9264 | Grafana RCE via SQL Expressions (Critical)
Description of CVE-2024-9264 | Grafana RCE The SQL Expressions experimental feature of
CVE-2024-9264 | Grafana RCE via SQL Expressions (Critical) Read More »
CVEs, Bug Bounty, OSINT, Recon, Vapt, Web
CVE−2024−24919 | Checkpoint information disclosure vulnerability.
Description of CVE-2024-24919 | checkpoint information disclosure vulnerability An attacker can potentially
CVE−2024−24919 | Checkpoint information disclosure vulnerability. Read More »
CVEs, Bug Bounty, OSINT, Recon, Vapt, Web
CVE-2024-45519 | Zimbra UnAuthenticated PostJournal RCE
Summary CVE-2024–45519 is a vulnerability in Zimbra, especially the PostJournal service. It
CVE-2024-45519 | Zimbra UnAuthenticated PostJournal RCE Read More »
CVEs, Bug Bounty, OSINT, Recon, Web
The Bug Bounty Hunter’s Guide: Top 10 Shodan Dorks for Finding Exposed Devices
Hii Everyone!! Today we are going to learn about the Shodan Dorking
The Bug Bounty Hunter’s Guide: Top 10 Shodan Dorks for Finding Exposed Devices Read More »
Recon, Bug Bounty, Vapt, Web
Master Subdomain HUNTING | Art of finding Hidden Assets
How to properly recone the sub domains using various methods that top bug bounty hunter don’t reveal with best wordlists for subdomain enum that will give you some results.
Master Subdomain HUNTING | Art of finding Hidden Assets Read More »
Bug Bounty, Recon, Web
Hacking Indian Government with reflected XSS and SQL Injection
Hacking an indian gov website and dumping the database and the importance of the google dorking while hunting on bug bounty program. with [payloads]
Hacking Indian Government with reflected XSS and SQL Injection Read More »
Bug Bounty, Payloads, Recon, Vapt, Web
CVE-2024-40711 | Criticle UnAuth RCE In Veeam BackUP and Replication
Identified as CVE-2024-40711, Veeam Backup & Replication versions before 12.1. 2.172 allows a threat actor to gain access to unauthenticated remote code execution through an underlying unprotected deserialization vulnerability, and achieves a critical CVSS score of 9.8
CVE-2024-40711 | Criticle UnAuth RCE In Veeam BackUP and Replication Read More »
CVEs, Bug Bounty, Recon, Web
CVE-2024-45409 | Ruby-SAML Auth Bypass In GitLab
CVE-2024-45409 is usefull for authentication bypass using vulnerability found in Ruby-saml.
CVE-2024-45409 | Ruby-SAML Auth Bypass In GitLab Read More »
CVEs, Bug Bounty, Recon, Web
CVE-2024-8353 | GiveWP WordPress Plugin Vulnerable to PHP Object Injection
CVE-2024-8353 | givewp plugin vulnerable to PHP object injection more then 100K wordpress application are using givewp plugin.
CVE-2024-8353 | GiveWP WordPress Plugin Vulnerable to PHP Object Injection Read More »
CVEs, Bug Bounty, CTF, OSINT, Recon, Web