Ayrix Bytes

🔹 PHP Development Server <= 7.4.21 - Remote Source Disclosure 📆 2023-01-28 #️⃣ #Source_code_disclosure

🔹 Exploit 📆 2023-01-29 #️⃣ #RCE

🔹 Froxlor v2.0.6 Remote Command Execution (CVE-2023-0315) 📆 2023-01-29 #️⃣ #RCE

🔹 Account takeover of Facebook/Oculus accounts due to First-Party access_token stealing 📆 2023-01-29 #️⃣ #Account_takeover

🔹 Account Takeover in Canvas Apps served in Comet due to failure in Cross-Window-Message Origin validation 📆 2023-01-29 #️⃣ #Account_takeover

🔹 DOM-XSS in Instant Games due to improper verification of supplied URLs 📆 2023-01-29 #️⃣ #DOM_XSS

🔹 Blind XSS To SSRF 📆 2023-01-29 #️⃣ #Blind_XSS

🔹 How i hacked all Zendesk sites 265,000 site by one line 📆 2023-01-30 #️⃣ #Web_cache_poisoning

🔹 Unserializable, But Unreachable: Remote Code Execution On vBulletin 📆 2023-01-31 #️⃣ #RCE

🔹 CVE-2023-22374: F5 BIG-IP Format String Vulnerability 📆 2023-02-01 #️⃣ #Format_string_vulnerability

🔹 RCE in Avaya Aura Device Services 📆 2023-02-01 #️⃣ #RCE

🔹 CentreStack Disclosure 📆 2023-02-02 #️⃣ #Authentication_bypass

🔹 Vulnerability Causing Deletion of All Users in CrushFTP Admin Area 📆 2023-02-02 #️⃣ #Application_level_DoS

🔹 Exploits Explained: Java JMX’s Exploitation Problems and Resolutions 📆 2023-02-02 #️⃣ #RCE

🔹 Pre-Auth RCE in Aspera Faspex: Case Guide for Auditing Ruby on Rails 📆 2023-02-02 #️⃣ #RCE

🔹 HackTheBox — Granny Write-Up 📆 Sat, 04 Feb 2023 14:28:56 GMT #️⃣ #grannies #writeup #hackthebox

🔹 CVE-2022–48149 📆 Sat, 04 Feb 2023 14:56:45 GMT #️⃣ #sql_injection

🔹 Mobile Penetration Tester Roadmap 📆 Fri, 03 Feb 2023 11:19:26 GMT #️⃣ #bug_bounty_tips #mobile_penetration_test

🔹 Play with Google, Twitter, Apple, Dell 📆 Fri, 03 Feb 2023 11:17:38 GMT #️⃣ #bug_bounty_tips #bug_bounty #bugbounty_writeup

🔹 WebPenetration Tester Roadmap 📆 Fri, 03 Feb 2023 11:31:30 GMT #️⃣ #bug_bounty_tips #web_penetration_testing #bug_bounty