Últimos bugs [EN]

[Bot]

The 100+ Million Person Data Disclosure
https://www.jhaddix.com/post/the-100-mil...disclosure

[Bot]

DOM-XSS in Instant Games due to improper verifications ($62,500?)
ysamm.com/?p=779

[Bot]

ATO in Canvas Games due to weak cross window message Origin validations ($62,500)
ysamm.com/?p=783

[Bot]

DOM-XSS in Instant Games due to improper verification of supplied URLs
https://ysamm.com/?p=779

[Bot]

The Anti-Recon Recon Club (using ReconFTW)
https://www.jhaddix.com/post/the-anti-re...g-reconftw

[Bot]

Security Advisory: Remote Command Execution in binwalk
https://onekey.com/blog/security-advisor...n-binwalk/

[Bot]

Account Takeover in Canvas Apps served in Comet due to failure in Cross-Window-Message Origin validation
https://ysamm.com/?p=783

[Bot]

Truffle Security is proud to host a new XSSHunter
https://trufflesecurity.com/blog/xsshunter/
Thank you @trufflesec πŸ‘

[Bot]

Cybersecurity and sustainability: The surprising role that security will play in a sustainable future
https://blog.intigriti.com/2023/01/31/cy...le-future/

[Bot]

Exposing Secrets Via SDLC Tools: The SonarQube Case
https://www.legitsecurity.com/blog/expos...rqube-case