» Tag
bug-bounty
3 posts$13,337 Bounty: Google Device Code Flow Account Takeover Bug
Google paid a $13,337 bounty for a confused-deputy flaw in its RFC 8628 device authorization flow enabling account takeover.
How a CORS Flaw Chains Into RCE on WordPress
Misconfigured CORS headers in WordPress plugins can chain with CSRF and file upload flaws into full RCE. A technical breakdown for bug bounty researchers.
Google Denies Bounty for a Critical GCP Bug It Still Hasn't Fixed
Researcher Justin O'Leary found a critical Google Cloud IAM bypass in Config Connector; Google first praised it, then denied the bounty and left it unfixed.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.com