Information Disclosure | writeups.xyz

Title	Vulnerabilities	Programs	Authors
P3 (Medium) : How I Gain Access To NASA's Internal Workspace?!	Information Disclosure	NASA	Sri Shavin Kumar
How I Got Bugs From Google Dorks	Information Disclosure	Undisclosed	Chandan Das
How I can easily get four P1 at NASA using Simple Google Dorking.	Information Disclosure	NASA	Francesco Topol / K4tedu
Vulnerabilities in Homepage Dashboard	RCE SSRF CSRF Information Disclosure Jellyfin	Homepage	Daniel Kachakil
How 1 Exposed Honeywell API Gave us Control Over an Internal Engineering System	Missing Authentication Information Disclosure Broken Authorization Account Takeover	Honeywell	Eaton Z. (@XeEaton)
$1600 Bounty on a Main Domain	Session Fixation 2FA / MFA Bypass Information Disclosure Authentication Bypass Open Redirect	Undisclosed	Debug (@Debug50)
Breaking the Barrier: Admin Panel Takeover Worth $3500	Authentication Bypass Password Reset Information Disclosure	Undisclosed	Aditya Sharma (@Assass1nmarcos)
Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources	Cloud RCE DoS Account Takeover Information Disclosure	AWS	Yakir Kadkoda Ofek Itach Michael Katchinskiy
How I Got Critical P2 Bug on Google VRP	Missing Authentication Information Disclosure	Google	Kazi Hashibur Rahman
ElasticSearch Smash & Grab	Elasticsearch Information Disclosure Missing Authentication	Undisclosed	Jesse Clark (@Hogarth45_)
NO_WILDCARD: How I discovered the Organization ID of any AWS Account	Information Disclosure Cloud	AWS	Sam Cox
Information Disclosure that made me $2000 in under 5 minutes	Information Disclosure	Undisclosed	Sugam Dangal (@SugamDangal2)
How I Found and Bypassed a Spring Boot Actuator Information Disclosure Bug	Spring Boot Information Disclosure	Undisclosed	Fahad Faisal (@Cametome006)
Traeger Grill D2 Wi-Fi Controller, Version 2.02.04	IoT Broken Authorization Information Disclosure	Traeger	Nick Cerne
Finding Hidden Threats: How I Found Leaked AWS Credentials in an Android App API Using DAST	Android Information Disclosure	Undisclosed	Muhammad Khizer Javed (@Khizer_javed47)
17 vulnerabilities in Sharp Multi-Function Printers	Printer Hacking RCE Information Disclosure Memory Corruption Buffer Overflow DoS LFI XSS Hardcoded API Keys Default Credentials Missing Authentication Directory Listing Authentication Bypass LDAP	Sharp Toshiba	Pierre Kim (@PierreKimSec)
How I compromised 1500 accounts/month with no technical skill	Privacy Issue Information Disclosure	Undisclosed	Molx32
Phantom Secrets: Undetected Secrets Expose Major Corporations	Information Disclosure	Mozilla Cisco Git	Yakir Kadkoda Ilay Goldman (@GoldmanIlay)
Non-Production Endpoints as an Attack Surface in AWS	Cloud CloudTrail Bypass Information Disclosure	AWS	Nick Frichette (@Frichette_n)
AWS CloudQuarry: Digging For Secrets In Public AMIs	Information Disclosure	AWS	Eduard Agavriloae (@Saw_your_packet) Matei Josephs
How i Find Database Credentials via Mass Recon & Recon Scoping on Gcash	Information Disclosure File Disclosure	Globe Telecom (Gcash)	Ph.Hitachi
How i Manage to Get Sensitive Informations via docker image	Information Disclosure Hardcoded Credentials	Globe Telecom (Gcash)	Ph.Hitachi
LeakyCLI: AWS and Google Cloud Command-Line Tools Can Expose Sensitive Credentials in Build Logs	Information Disclosure	AWS Google (GCP)	Roi Nisimi (@Roinisimi)
$20,300 Bounties from a 200 Hour Hacking Challenge	SQL Injection Information Disclosure Stored XSS IDOR File Disclosure	Undisclosed	Mohammad Zaheri (@Mzaherii) Mohammad Nikouei (@NikoueiMohammad)
Leaking ObjRefs to Exploit HTTP .NET Remoting	Information Disclosure RCE .NET Remoting ASP.NET Security Code Review	Microsoft (.NET Framework)	Markus Wulftange (@Mwulftange)

Page 1 of 26