#bugbounty

Articles tagged with #bugbounty

Indirect prompt injection In Atlassian's Rovo chat
Prompt injection is not a new idea. But most of the write-ups you'll find are about chatbots being tricked directly. I have been a reading a lot about Indirect prompt injection bugs lately and started
May 7, 20265 min read80
JWT misconfiguration leads to zero-click account takeover and PII exposure
Recently I came across a relatively lesser known bug bounty platform and decided to hunt on it. While testing the program, I discovered that its JWT-based authentication could be manipulated to gain u
Mar 9, 20265 min read103