Atlassian Jira | DOM XSS Vulnerability | Unauthenticated

Atlassian Jira is a widely-used project management platform, offering robust tools for tracking, managing, and collaborating on various projects. Its features, including issue tracking and customizable workflows, make it a staple in software development and project management.

DOM XSS (Cross-Site Scripting) is a medium-critical vulnerability specific to web applications. This attack allows malicious scripts to be injected directly into a web page's Document Object Model (DOM), putting users at risk. Prompt identification and remediation of this vulnerability are essential to safeguarding a web application's integrity and security.

Read More

The most notorious hackers in internet history

I strongly believe that "Top 10 the most..." lists in hacking are unreliable. Non-industry experts typically create these rankings and rely on speculations. Journalists amplify these rankings but often lack a full understanding of the subject, leading to exaggerated importance assigned to certain persons. This can be extremely misleading, particularly for those unfamiliar with the intricacies of hacking.

Read More

Auditing United Airlines | Bug Bounty Program

A few months ago, United Airlines launched a Bug Bounty program with a slightly different twist compared to the usual ones. Instead of rewarding participants with a sum of money, they opted to offer miles that can be used for flights or other perks such as car rentals, hotel stays, or merchandise with both their airline and those within the Star Alliance. Rewards range from 50,000 to 250,000 up to 1,000,000 miles, operating essentially as loyalty points. For instance, a flight from Bucharest to Dublin costs around 30,000 miles.

Read More