Ayrix Bytes

🔹 Subdomain Hijacking Of Any Qwilr’s Customer 📆 2023-01-01 #️⃣ #Subdomain_takeover

🔹 $500 in 5 minutes 📆 2023-01-01 #️⃣ #Broken_link_hijacking

🔹 Bypass Premium Account Payment (GetPocket) 📆 2023-01-01 #️⃣ #Payment_bypass

🔹 India’s Aadhar card source code disclosure via exposed .svn/wc.db 📆 2023-01-02 #️⃣ #Source_code_disclosure

🔹 An amazing way to turn a xss into an ATO 📆 2023-01-02 #️⃣ #XSS

🔹 Exploiting thousands of Domains for XSS 📆 2023-01-02 #️⃣ #XSS

🔹 Instagram vulnerability : Turn off all type of message requests using deeplink (Android) 📆 2023-01-02 #️⃣ #Insecure_deeplink

🔹 Bypass firewalls with of-CORs and typo-squatting 📆 2023-01-02 #️⃣ #CORS_misconfiguration

🔹 Vue JS Reflected XSS 📆 2023-01-03 #️⃣ #Reflected_XSS

🔹 Fetch Diversion 📆 2023-01-03 #️⃣ #DOM_XSS

🔹 Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More 📆 2023-01-03 #️⃣ #Account_takeover

🔹 Cacti: Unauthenticated Remote Code Execution 📆 2023-01-03 #️⃣ #RCE

🔹 CVE-2022-25026 & CVE-2022-25027: Vulnerabilities in Rocket TRUfusion Enterprise 📆 2023-01-04 #️⃣ #Authentication_bypass

🔹 PandoraFMS - Pre-Auth Remote Code Execution 📆 2023-01-06 #️⃣ #RCE

🔹 I scanned every package on PyPi and found 57 live AWS keys 📆 2023-01-06 #️⃣ #Information_disclosure

🔹 Advanced CSRF Exploitation 📆 2023-01-07 #️⃣ #CSRF

🔹 The Bug That Kept On Giving :: PaymentBypass :: QR CODE 📆 2023-01-07 #️⃣ #Payment_bypass

🔹 Uploading the Webshell using filename of Content-Disposition Header Story! 📆 2023-01-09 #️⃣ #Unrestricted_file_upload

🔹 Meta Quest: Attacker could make any Oculus user to follow (subscribe) him without any approval 📆 2023-01-09 #️⃣ #IDOR

🔹 Lexmark MC3224adwe RCE exploit 📆 2023-01-09 #️⃣ #RCE