{"uuid": "7ae0a2df-eda6-4487-bcdf-b4bfefb6ec1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41277", "type": "seen", "source": "https://t.me/bhhub/641", "content": "#BugBountyTips of the Day\nNew Feature Alert \ud83d\udea8  [ --SQLi ] Support #MySQL mod_Security & libinjection bypass [** New **]  Have a look :  https://t.co/9ZLO4pJsuG  $ bash  https://t.co/oGQuTKBBAs -u  https://domain.tld/secret --SQLi #bugbountytips #bugbountytip #bugbounty #infosec #cloud #cybersecurity  https://t.co/RKjXMaF2tw\n---\n#BugBounty #bugbountytip #infosec - Do you want to get all subdomains of a host, get the open ports of all of them (using IP address deduplication), and check if there's an HTTP service running? Use the set of tools included in the screenshot! Links in the comments.  https://t.co/qC0FVQCDzA\n---\nPassword reset token was getting leaked in the forgot password Request itself as well as on other endpoint '/verify/'. 2x bounty.@SynackRedTeam #bugbountytips  https://t.co/UYOEXKPAve\n---\nBest of YouTube Channels for Pentester (Part 3)   https://t.co/70lBKdBw16  https://t.co/cRhoJ6D0fC  https://t.co/IeZHpjoDjR  https://t.co/qQRG02wVHv  @rot169 @0xConda @rana__khalil @NahamSec #infosec #cybersecurity #pentesting #oscp #bugbounty\n---\nEl Curso Virtual de Hacking con Kali Linux est\u00e1 disponible en video. #hacking #cybersecurity #bugbounty #osint #forensics \u2623 \u2705 M\u00e1s informaci\u00f3n en:  https://t.co/lsfm4jifRQ  https://t.co/pyXzMnVOyv\n---\nBest of Web Penetration Testing (Part 4)  Credit @trbughunters   #infosec #cybersecurity #pentesting #ctf #oscp #windows #cheatsheet #redteaming #burpsuite #bugbounty #bugbountytip4  https://t.co/6bPVxzGUTI\n---\nSmall to medium size businesses are using WordPress, Learn how to recon and hack WordPress websites in a legal penetration testing environment. #bugbountytips #infosec  https://t.co/QpGPHxs7H6\n---\nAPI Security Checklist\ud83d\udd25   https://t.co/7tW3yfUsEy  #bugbounty #bugbountytips #apisecurity #apipentesting #checklist\n---\nCVE-2021-41277 MetaBase Arbitrary File Read  MetaBase < 0.40.5 1.0.0 <= MetaBase < 1.40.5   https://t.co/TtJHu6lvr1  PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1  #CVE #BugBounty #bugbountytips #infosec #vulnerable", "creation_timestamp": "2021-11-22T13:37:04.000000Z"}