| My Expense Report resulted in a Server-Side Request Forgery (SSRF) on Lyft |
|
|
|
| Chaining Multiple Vulnerabilities to Gain Admin Access |
|
|
|
| Secure Your Jenkins Instance Or Hackers Will Force You To! (Snapchat’s $5,000 Vulnerability) |
|
|
|
| Airbnb – Web to App Phone Notification IDOR to view Everyone’s Airbnb Messages |
|
|
|
| Airbnb – Ruby on Rails String Interpolation led to Remote Code Execution |
|
|
|
| Airbnb – Chaining Third-Party Open Redirect into Server-Side Request Forgery (SSRF) via LivePerson Chat |
|
|
|
| Airbnb – When Bypassing JSON Encoding, XSS Filter, WAF, CSP, and Auditor turns into Eight Vulnerabilities |
|
|
|
writeups.xyz
/
Ben Sadeghipour (@Nahamsec)