Valuable lessons

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   CVE-2022-0337 (reward: $10,000 - Google) - Write-up and Video

   System environment variables leak on Google Chrome, Microsoft Edge, and Opera.

   Read : CVE-2022-0337 (reward: $10,000 - Google) - Write-up and Video
2. /02

   Bounty Thursdays - live #3 (news/tools and community)

   In this episode of Bounty Thursdays they focus on news, and tools related to bugbounty and the offensive (red) side of cyber.

   Watch : Bounty Thursdays - live #3 (news/tools and community)
3. /03

   Alissa Knight Talks About API Hacking, Car Hacking, Creating Content for Hackers and More

   Alissa Knight is a cybersecurity influencer, content creator, and community manager as a partner at Knight Ink that provides vendors go-to market and content strategy for telling brand stories at scale in cybersecurity.

   Watch : Alissa Knight Talks About API Hacking, Car Hacking, Creating Content for Hackers and More
4. /04

   Bug Bounty Redacted #1 - Exposed Redis and HAProxy

   Welcome to Assetnote's new series called Bug Bounty Redacted. In this series they will be going through reports they have submitted to bug bounty programs over the last five years.

   Watch : Bug Bounty Redacted #1 - Exposed Redis and HAProxy
5. /05

   From XSS to RCE (dompdf 0day)

   The popular PHP library dompdf (used for rendering PDFs from HTML) suffers from a vulnerability that allows Remote Code Execution in certain configurations.

   Read : From XSS to RCE (dompdf 0day)