Últimos bugs [EN]

[Bot]

CVE-2021-43444 to 43449: Exploiting ONLYOFFICE Web Sockets for Unauthenticated Remote Code Execution
https://labs.nettitude.com/blog/exploiti...execution/

[Bot]

How I was able to steal users credentials via Swagger UI DOM-XSS
https://medium.com/@M0X0101/how-i-was-ab...4255eb8c96

[Bot]

OSCP Guide 2022
https://sgtdede.gitbook.io/hacking/oscp-2022/guide-en

[Bot]

Looking Back at Our Bug Bounty Program in 2022
https://about.fb.com/news/2022/12/metas-...gram-2022/

[Bot]

CVE-2022–42710: A journey through XXE to Stored-XSS
https://omar0x01.medium.com/cve-2022-427...1d74dfe917

[Bot]

Decentralized Identity Attack Surface – Part 2
https://www.cyberark.com/resources/threa...ace-part-2

[Bot]

Foxit PDF Reader - Use after Free - Remote Code Execution Exploit
https://hacksys.io/blogs/foxit-reader-ua...2022-28672

[Bot]

Missing Bricks: Finding Security Holes in LEGO APIs
https://salt.security/blog/missing-brick...-lego-apis

[Bot]

safeurl for Go
https://blog.doyensec.com/2022/12/13/safeurl.html

[Bot]

The year in review – ‘Record bug bounty payouts demonstrate the value companies see in the industry’
https://blog.intigriti.com/2022/12/15/th...-industry/