Vulnerabilities tagged "interesting bug"

Disclosing updates on Microsoft's Vulnerability Reports

Just send an email pretending to be part of another report and the system will make you part of it.Its really that simple, sending an email using your the email associated with your Researcher portal account with the subject `VULN-`will get that email added to the report and be copied on future updates...

Authentication Bypass on Zoho ManageEngine Desktop Central

This is almost an intended feature, basically if an attacker can craft a their own State cookie, they can trick the `StateFilter` into reading the `forwardPath` and forwarding their request to another servlet directly. The interesting side-effect here is that the redirect will bypass any other filters left in the chain and go directly to the other servlet.