bugbounty技巧聚合20211108

漏洞报告

【MariaDB】Path Traversal CVE-2021-26086 CVE-2021-26085
http://hackerone.com/reports/1369288

【Logitech】clickjacking on deleting user’s clips [http://crossclip.com/clips]
http://hackerone.com/reports/1294767

【HackerOne 1000刀】HackerOne Staging uses Production data for testing
http://hackerone.com/reports/1392511

【Kubernetes 100刀】Broken Link Hijacking on kubernetes.io Documentation
http://hackerone.com/reports/1331361

【Kubernetes 250刀】Broken link hijacing in http://kubernetes-csi.github.io/docs/drivers.html
http://hackerone.com/reports/1212853

挖洞技巧

Firebase Cloud Messaging Service Takeover: A small research that led to 30k$+ in bounties
http://abss.me/posts/fcm-takeover/

The Speckle Umbrella story — part 2
http://irsl.medium.com/the-speckle-umbrella-story-part-2-fcc0193614ea

文字来源于- 火线 Zone-云安全社区，安全小天地只做文章分享，如有侵权，请联系站长删除