Loading video...

Video Failed to Load

Go Home

Race Condition + Host Header Injection + Redis(Cache)= Zero Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBounty

_SecurityAttack's profile picture

Sina

3,797 subscribers

24,139 views • 1 year ago •via X (Twitter)

Science & TechnologyNews & PoliticsEducation#BugBounty
LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

AS IF!! WHAT?! It was not possible to distinguish the MAN in the women’s swimming race?! I was there that day in March 2022. This is what I saw. 👀 You tell me: Is THIS a woman?! The The New York Times is an embarrassment.
0:10

AS IF!! WHAT?! It was not possible to distinguish the MAN in the women’s swimming race?! I was there that day in March 2022. This is what I saw. 👀 You tell me: Is THIS a woman?! The The New York Times is an embarrassment.

Linda Blade

129,751 views • 9 months ago

A tragic mass shooting in Leland, Mississippi that will get zero media coverage because the gunman was not a white male. The way tragedy is granted attention based on the race and ideology of the shooter is awful.
0:16

A tragic mass shooting in Leland, Mississippi that will get zero media coverage because the gunman was not a white male. The way tragedy is granted attention based on the race and ideology of the shooter is awful.

Eric Matheny 🎙️

115,330 views • 8 months ago

it's race week but it's triple header time... with the sf-25 and it's (one of) the home races of ferrari, the home race of charles and the weekend that might decide it all (spain). god save us all
0:16

it's race week but it's triple header time... with the sf-25 and it's (one of) the home races of ferrari, the home race of charles and the weekend that might decide it all (spain). god save us all

clara

83,345 views • 1 year ago

The fear of allllll the race hustling HAMAS CHEER LEADERS not being able to pay rent after TIK TOK is banned. I Love it!!!
0:16

The fear of allllll the race hustling HAMAS CHEER LEADERS not being able to pay rent after TIK TOK is banned. I Love it!!!

MichaelRapaport

342,427 views • 2 years ago

It’s funny now but when i was using android, the oppression from iPhone users was not it at all
0:13

It’s funny now but when i was using android, the oppression from iPhone users was not it at all

$ilva 💸

54,424 views • 1 year ago

I built this app for myself in the first lockdown of 2020, because I spent way too much time on Instagram and online news. After using the prototype for two weeks, I noticed my screen time was down 44%…and decided to publish it on the AppStore!
0:10

I built this app for myself in the first lockdown of 2020, because I spent way too much time on Instagram and online news. After using the prototype for two weeks, I noticed my screen time was down 44%…and decided to publish it on the AppStore!

Frederik Riedel 🐻‍❄️

27,182,949 views • 3 years ago

"yeah yeah bit of a tough one. once I calmed down a bit, I was alright but yeah but lively through the race. not the easiest of weekends and uh yeah"
0:19

"yeah yeah bit of a tough one. once I calmed down a bit, I was alright but yeah but lively through the race. not the easiest of weekends and uh yeah"

a⁸¹ 🪼 | OSCAR PIASTRI 9X RACE WINNER

19,260 views • 9 months ago

#JapaneseGP 🇯🇵 | Lewis Hamilton post race: “Was I surprised [to have dropped to P6]? I mean, I was struggling with power the whole race so, no. Not particularly. But yea, need to go through it with the fine comb.”
0:19

#JapaneseGP 🇯🇵 | Lewis Hamilton post race: “Was I surprised [to have dropped to P6]? I mean, I was struggling with power the whole race so, no. Not particularly. But yea, need to go through it with the fine comb.”

deni

30,129 views • 2 months ago

"I know I've enjoyed watching that race, I think it was a great showpiece for the sport, its how we advertise the sport and if that doesn't convince people that this is a wonderful sport, I'm not sure what will." 🏆 👏 Ruby Walsh on the 2024 Grand National. #ITVRacing
0:15

"I know I've enjoyed watching that race, I think it was a great showpiece for the sport, its how we advertise the sport and if that doesn't convince people that this is a wonderful sport, I'm not sure what will." 🏆 👏 Ruby Walsh on the 2024 Grand National. #ITVRacing

ITV Racing

40,624 views • 2 years ago

I love Punch, and was so happy to see him in person, but when I saw the rest of the zoo I was very saddened. I am not trying to cause problems. I am simply posting the TRUTH. I love seeing how Punch is so adorable & cute, but I can’t unsee the conditions that this orangutan lives in.
0:15

I love Punch, and was so happy to see him in person, but when I saw the rest of the zoo I was very saddened. I am not trying to cause problems. I am simply posting the TRUTH. I love seeing how Punch is so adorable & cute, but I can’t unsee the conditions that this orangutan lives in.

Human Owned by Cat 😺

28,692 views • 20 days ago

Trump: “I just give you a little bit of a thing and by the way, the press will say, oh, he rambled, no, that's not ramble, you know what that is? That was genius, that's the weave, now, see, I, I wove frankly the rest of it I don't really even have to talk about, but that was the ultimate weave”
0:19

Trump: “I just give you a little bit of a thing and by the way, the press will say, oh, he rambled, no, that's not ramble, you know what that is? That was genius, that's the weave, now, see, I, I wove frankly the rest of it I don't really even have to talk about, but that was the ultimate weave”

Republicans against Trump

222,605 views • 1 year ago

Not a hanging offence, but I reckon Luke Nolen is in trouble re a suspension of sorts after this. Can understand being filthy in losing the race but that had the potential to be disastrous
0:17

Not a hanging offence, but I reckon Luke Nolen is in trouble re a suspension of sorts after this. Can understand being filthy in losing the race but that had the potential to be disastrous

Adam Page

25,193 views • 3 months ago

Here is an example of what I mean by my post I quoted. There was nothing on the road, yet FSD 14.2 went over the line and ripples to avoid whatever it may have imagined. I was startled for a second and can only imagine the shock for someone trying FSD for the very first time. No, the car in the opposite lane did not come over to my side either Again, that alone would have been enough for my wife's solid "Nope, I am not using that." (I filtered out my voice, as I was on the phone.)
0:10

Here is an example of what I mean by my post I quoted. There was nothing on the road, yet FSD 14.2 went over the line and ripples to avoid whatever it may have imagined. I was startled for a second and can only imagine the shock for someone trying FSD for the very first time. No, the car in the opposite lane did not come over to my side either Again, that alone would have been enough for my wife's solid "Nope, I am not using that." (I filtered out my voice, as I was on the phone.)

Andy ze German

136,638 views • 6 months ago

I don’t know if Russell’s car crashed the entire telemetry for the race, but even Leclerc had a moment with the DRS, knowing that the DRS will not be activated if the data is received correctly by the car, even if the driver tried to open it.
0:10

I don’t know if Russell’s car crashed the entire telemetry for the race, but even Leclerc had a moment with the DRS, knowing that the DRS will not be activated if the data is received correctly by the car, even if the driver tried to open it.

F1Techy

168,381 views • 1 year ago

MAMATA BANERJEE : "I was surprised. I saw that my phone was not receiving calls, messages were not coming. After that, I saw that the Internet itself had been withdrawn" Her Internet Service Provider said, no such thing happened. Internet services are working fine for everyone 😅
0:12

MAMATA BANERJEE : "I was surprised. I saw that my phone was not receiving calls, messages were not coming. After that, I saw that the Internet itself had been withdrawn" Her Internet Service Provider said, no such thing happened. Internet services are working fine for everyone 😅

News Algebra

157,872 views • 1 month ago

Trump sounds incomprehensible right now “So I just give you a little bit of a thing and by the way, the press will say, oh, he rambled, no, that's not ramble, you know what that is? That was genius, that's the weave, now, see, I, I wove frankly the rest of it I don't really even have to talk about, but that was the ultimate weave and, and think of it”
0:19

Trump sounds incomprehensible right now “So I just give you a little bit of a thing and by the way, the press will say, oh, he rambled, no, that's not ramble, you know what that is? That was genius, that's the weave, now, see, I, I wove frankly the rest of it I don't really even have to talk about, but that was the ultimate weave and, and think of it”

Headquarters

743,386 views • 1 year ago

Lewis was asked if he saw the incident between the McLarens 😭 "I mean, I was watching the race into Turn 10 because I was nowhere. Every time I came through Turn 10, I kept looking up to try and see what was happening." "That's how boring the race was for me." 😭😭
0:16

Lewis was asked if he saw the incident between the McLarens 😭 "I mean, I was watching the race into Turn 10 because I was nowhere. Every time I came through Turn 10, I kept looking up to try and see what was happening." "That's how boring the race was for me." 😭😭

sim

472,182 views • 1 year ago

"I am tired of BJP's jokes.I am not in the race.I am not in the BJP state leadership race." - TamilNadu State BJP Chief Annamalai Maybe he has realized that BJP will have no place in Tamil Nadu after the Waqf Bill is passed.
0:16

"I am tired of BJP's jokes.I am not in the race.I am not in the BJP state leadership race." - TamilNadu State BJP Chief Annamalai Maybe he has realized that BJP will have no place in Tamil Nadu after the Waqf Bill is passed.

Sivangi Choudhury (Mondal)

104,016 views • 1 year ago

I am not the daughter of Shuja'iyya, but I am the daughter of every inch of this land. I concluded my report on the horror and tearful scene I saw today in the Shuja'iyya neighborhood by saying, "It is no longer fit for life. #GazaStarving #GazaGenocide
0:18

I am not the daughter of Shuja'iyya, but I am the daughter of every inch of this land. I concluded my report on the horror and tearful scene I saw today in the Shuja'iyya neighborhood by saying, "It is no longer fit for life. #GazaStarving #GazaGenocide

Doaa J Rouqa

16,077 views • 10 months ago

rewatching is not enough, i need to delete this scene from my brain to experience the same high i did when i saw it for the first time
0:18

rewatching is not enough, i need to delete this scene from my brain to experience the same high i did when i saw it for the first time

angie

73,237 views • 5 months ago