/Hive Five #67 · Apr 25, 2022
The more you know
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Palisade identifies Wormable Cross-Site Scripting Vulnerability affecting Rarible’s NFT Marketplace
On April 14th, Palisade reported a cross-site scripting vulnerability and WAF bypass affecting the “rarible.com” domain. An attacker could inject arbitrary HTML and JavaScript on their profile page which persisted by “following the user around” as they navigated the website.
Read : Palisade identifies Wormable Cross-Site Scripting Vulnerability affecting Rarible’s NFT Marketplace -
OffensiveCon22 - Mark Dowd- Keynote -How Do You Actually Find Bugs?
Mark Dowd is an expert in application security, specializing primarily in low level Operating System flaws for desktop and mobile platforms.
Watch : OffensiveCon22 - Mark Dowd- Keynote -How Do You Actually Find Bugs? -
Introduction to Z-winK University
The Z-winK University is back! The goal is to teach how to be successful in bug bounty with tons of bug bounty tips.
Watch : Introduction to Z-winK University -
Psychic Signatures in Java
The long-running BBC sci-fi show Doctor Who has a recurring plot device where the Doctor manages to get out of trouble by showing an identity card which is actually completely blank.
Read : Psychic Signatures in Java -
The More You Know, The More You Know You Don’t Know
This is their third annual year in review of 0-days exploited in-the-wild. Each year they’ve looked back at all of the detected and disclosed in-the-wild 0-days as a group and synthesized what they think the trends and takeaways are.
Read : The More You Know, The More You Know You Don’t Know