Pornhub: Unsecured DB instance

The researcher identified vulnerable OrientDB server instances on our infrastructure. The DB servers were found to be vulnerable to script based remote code execution leading to privilege escalation. Two servers running OrientDB were identified, with default login/password combinations. Upon...

Pornhub: Stored XSS on the http://ht.pornhub.com/widgets/

The researcher found a stored XSS in the HubTraffic widgets section. I found Stored XSS in the Hubtraffic widgets section. The team was very responsible and fixed the issue fast. Many thanks to the PornHub security team for the bounty and swag i received it already, very cool!...