pentester.land· Mar 25, 2022· by Marouane Mouhtadi (@Mar0_0uane)

Bug Bounty Adventures: A NodeBB 0-day

Open Original Article ↗
Target Program: Opera
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#CSRF#Account takeover#SSO#Broken authentication

More Writeups Like This

pentester.land

Oculus SSO “Account Linking” bug leads to account takeover on third party websites and inside VR Games/Apps

by Youssef Sammouda (@samm0uda)
pentester.land

CSRF Bypass Using Domain Confusion Leads To ATO

by Osama Aly
pentester.land

Forced SSO Session Fixation

by Serj Novoselov (@novoselov_s)
pentester.land

Account Takeover via Broken Authentication Workflow: Free Lifetime Streaming!

by Rohan Ahuja