Overview On August 24th, 2022, we reported a vulnerability to Netlify affecting their Next.js “netlify-ipx” repository which would allow an…
To preface: the bug we found here is really simple. The interesting thing here is the impact of the vulnerability…
Between the period of July 6th to October 6th myself, Brett Buerhaus, Ben Sadeghipour, Samuel Erb, and Tanner Barnes worked…
After a long day of trying and failing to find vulnerabilities on the Verizon Media bug bounty program I decided…
Ever since I was a kid I was never good at doing schoolwork. I had envied everyone that seemed to…
Over the last few years, usage of vulnerability disclosure and bug bounty programs have increased significantly. It is now almost…
As a preface, when I originally found this bug I was unfamiliar the class of “null byte buffer overflow” even…
Jira Service Desk is a help desk application that is built on top of core Jira. It allows customers to…
One of the more interesting things I’ve had the opportunity to hack on is the Tesla Model 3. It has…
One of the more common vulnerabilities on ASP.NET applications is local file disclosure. If you’ve never developed or worked with…