Path traversal with High severity, downgraded to Low, then from Low to Medium (???). Finally, it was Triaged. At this point, you don't even feel like asking anymore... However, I really like find 0-days performing manual code review.👀#BugBounty

0-Click RCE (Unauthenticated/Pre-Auth) Exploit for CVE-2024-9932 😇 #Wordpress #BugBounty

0-Click RCE (Unauthenticated/Pre-Auth) Exploit for CVE-2024-50498 (Code Injection + Arbitrary File Upload)😀 #Wordpress #BugBounty #BugChaining

0-click RCE (Unauthenticated/Pre-auth) Exploit for CVE-2023-51409 #BugBounty #WordPress 🙃

0-click RCE (Unauthenticated/Pre-auth) Exploit for CVE-2024-51793 🙌 #BugBounty #bugbountytips #WordPress #Hacking

0-click RCE (Unauthenticated / Pre-auth) Exploit for CVE-2024-51791 (Unrestricted File Upload + Brute Forcing) 🤓 #BugBounty #WordPress #Hacking

0-click RCE Exploit for CVE-2024-10924 that affects 4 million WP sites 🤪 Secure your site ASAP! #WordPress #BugBounty #BugBountyTips

0-click RCE (Unauthenticated/Pre-auth) Exploit for CVE-2024-50526🤓 #WordPress #BugBounty

CVE-2024-11391 The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'class_fma_connector.php' file in a… cve.org/CVERecord?id=C…

Cool, another one! CVE-2024-12314 has just been published and assigned. This time, it's a high-severity (7.2) vulnerability: an Unauthenticated Cache Poisoning that leads to Stored Cross-Site Scripting (s-XSS).

CVE-2024-12314 The Rapid Cache plugin for WordPress is vulnerable to Cache Poisoning in all versions up to, and including, 1.2.3. This is due to plugin storing HTTP headers in the c… cve.org/CVERecord?id=C…

Thanks 👌🏻🔥🔥🔥 Samuel cc HackerOne BugBountyCL #AWC #bugbounty #chile

It seems I need to hack a bit more to find some balance. I'll try again, one more time.

SSRF PoC – CVE-2025-22870 – HTTP Proxy Bypass via IPv6 Zone ID in Go github.com/JoshuaProvoste…

Magoo, a Python-based tool for SSRF (Server-Side Request Forgery) vulnerability hunting and unauthorized port scanning. github.com/JoshuaProvoste… #BugBounty #Hacking #SSRF

!La espera terminó! La Anti-Conferencia ha llegado en su versión de despedida. Duoc Plaza Vespucio este 21 de noviembre a partir de las 08:30 horas. ¡INSCRÍBETE AQUÍ Y AHORA!: welcu.com/lockdown0x0/wo…