14 matches found
gitlab-watchman
GitLab Watchman About GitLab Watchman GitLab Watchman is an application that uses the GitLab API to detect exposed secrets and personal data. It also enumerates the GitLab instance for any useful information. Features Secrets Detection It searches GitLab for internally shared projects and looks a...
hackerone
hackerone I have collected all hackerone disclosed reports by brute forcing on their api https://api.hackerone.com/v1/hackers/reports/id from number 1 to 1500000. May be there are more reports, that it's id is more than 1500000. File reports.csv contain more than 10000 disclosed report, every lin...
HTB-TwoMillion-machine
Hack The Box - TwoMillion Writeup Overview This repository contains my walkthrough for the Hack The Box - TwoMillion machine. The goal of this writeup is to document my methodology, explain the enumeration process, and demonstrate the exploitation chain that led to both User and Root access...
wix-kickstartx-challenge-writeup
Wix KickstartX Challenge 2026 — Full Writeup Result: 200/200 100% — Token: WKX-9245FA70-200 Date: March 24, 2026 1. Discovery & Reconnaissance The Challenge Announcement A LinkedIn post announced a special challenge for Wix KickstartX — a junior developer program. The rules: 30 minutes, one...
EUVD-2026-21047
Beszel has an IDOR in hub API endpoints that read system ID from URL parameter...
CVE-2026-28288
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue...
EUVD-2023-31096
Malicious code in bioql PyPI...
GO-2023-1670 Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd
Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd...
HealthForYou 1.11.1 / HealthCoach 2.9.2 User Enumeration Vulnerability
User enumeration through API Overview Advisory ID: TRSA-2104-01 Advisory version: 1.0 Advisory status: Public Advisory URL: https://trovent.io/security-advisory-2104-01 Affected product: HealthForYou & Sanitas HealthCoach mobile and web applications Tested versions: HealthForYou 1.11.1...
h1-ctf: Grinchs website takendown with various other exploits
The HackyHolidays This is my first HackerOne CTF challenge writeup. Contents: flag1: Day 1 Check the files, robots.txt flag2: Day 2 one more : jquery.min.js flag3: Day 3 People Rater flag4: Day 4 Brute Force, Swag Shop flag5: Day 5 Brute Force, Secure Login flag6: Day 6 Brute Force, My Diary flag...
ZOHO ManageEngine ServiceDesk Plus User Privilege Vulnerability
ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL architecture based on IT service management software ITSM. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management a...
CVE-2017-16250
A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could be used to identify valid user ids and associated user names...
CVE-2017-16250
A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the API function to enumerate through user-ids which could be used to identify valid user ids and associated user names...