Últimos bugs [EN]

[Bot]

$500 in 5 minutes
https://medium.com/@coffeeaddict_exe/500...977e89a337

[Bot]

Bypass firewalls with of-CORs and typo-squatting
https://trufflesecurity.com/blog/of-cors/index.html

[Bot]

Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More
https://samcurry.net/web-hackers-vs-the-auto-industry/

[Bot]

Top 20 bug bounty YouTube channels of 2022
https://blog.intigriti.com/2023/01/03/to...s-of-2022/

[Bot]

Cloud Metadata - AWS IAM Credential Abuse
https://sneakymonkey.net/cloud-credential-abuse/

[Bot]

[Grab Android/iOS] Insecure deeplink leads to sensitive information disclosure
https://hackerone.com/reports/401793

[Bot]

Immnunefi Crypto Losses in Q3 2022
https://assets.ctfassets.net/t3wqy70tc3b...Report.pdf

[Bot]

Prototype pollution-like bug variant discovered in Python
https://portswigger.net/daily-swig/proto...-in-python

[Bot]

ChatGPT hacking tools for bug bounty, pentesting, blue teams, and more
https://medium.com/@david.azad.merian/ch...445698d23f

[Bot]

Bad things come in large packages: .pkg signature verification bypass on macOS
https://sector7.computest.nl/post/2023-01-xar/