REPORT1 SOURCE
Æ / PUBLIC MALWARE INTELLIGENCE
Follow the evidence.
Published file metadata, source observations, indicators, and research history in one bounded catalog.
24Reachable catalog records
1 / 1Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Review source update dates and status
- src_bc1f1ebc8852333272Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
24 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
REPORT1 SOURCE
Eradicating image authentication injection from the entire internet
First reported May 10, 2017 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
How I stole the identity of every Yahoo user
First reported May 09, 2017 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
The $12,000 Intersection between Clickjacking, XSS, and Denial of Service
First reported Jul 04, 2018 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
How I could've taken over the production server of a Yahoo acquisition through command injection
First reported Jun 04, 2017 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Permanent account takeover on Yahoo's Small Business platform
First reported Jun 25, 2017 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Exploiting Directory Traversal to View Customer Credit Card Information on Yahoo's Small Business Platform
First reported Nov 10, 2017 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Reading ASP secrets for $17,000
First reported Dec 17, 2018 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Hacking a Massive Steam Scamming and Phishing Operation for Fun and Profit
First reported May 09, 2018 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Cracking my windshield and earning $10,000 on the Tesla Bug Bounty Program
First reported Jul 14, 2019 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Analysis of CVE-2019-14994 - Jira Service Desk Path Traversal leads to Massive Information Disclosure
First reported Sep 26, 2019 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Hacking Chess.com and Accessing 50 Million Customer Records
First reported Dec 16, 2020 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Hacking Millions of Modems (and Investigating Who Hacked My Modem)
First reported Jun 03, 2024 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Hacking Starbucks and Accessing Nearly 100 Million Customer Records
First reported Jun 20, 2020 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform
First reported Aug 03, 2023 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More
First reported Jan 03, 2023 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Don't Force Yourself to Become a Bug Bounty Hunter
First reported May 11, 2020 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
We Hacked Apple for 3 Months: Here’s What We Found
First reported Oct 07, 2020 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Hacking the World Poker Tour: Inside ClubWPT Gold’s Back Office
First reported Oct 12, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel
First reported Jan 23, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Hacking Kia: Remotely Controlling Cars With Just a License Plate
First reported Sep 20, 2024 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty
First reported Nov 01, 2019 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Exploiting Web3's Hidden Attack Surface: Universal XSS on Netlify's Next.js Library
First reported Sep 21, 2022 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordREPORT1 SOURCE
Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts
First reported Apr 19, 2020 00:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.