Vulncure (@vulncure) / X

Vulncure

235 posts

Vulncure

@vulncure

We Innovate , Protect and Cure

New Delhi

Joined December 2022

Pinned
Vulncure
@vulncure
Aug 27, 2025
🚀 Introducing the Vulncure Penetration Testing Dashboard Meet Vulncure Pentest Dashboard — the all-in-one platform designed to simplify and supercharge your penetration testing workflow. In this demo, we’ll walk you through how Vulncure helps you: • ✨ Streamline your
00:00
1.2K
Vulncure
@vulncure
Dec 13, 2023
Bugbounty Reports in Thread🧵 Bug: Blind SQL injection on id\.indrive\.com Type: SQL Injection Program: inDrive Siverity: Critical (9 ~ 10) Bounty: $4,134 Dive into the details 🧵:📷
48K
Vulncure
@vulncure
Feb 4, 2024
📢 We Are Hiring at Vulncure! Vulncure is a leading penetration testing company dedicated to providing cutting-edge cybersecurity solutions. We are expanding our team and seeking a passionate and talented individual to join us as a Junior Penetration Tester. Responsibilities:
46K
Vulncure
@vulncure
Dec 18, 2023
PART 1 🍏 Let's Exploit the Nodejs Application GET /api/order/from/1/range/2 HTTP/1.1Response: { "statusCode":200, "data": {"from":"1","to":3}, "message":"Parameters accepted." } Do Observe the DATA Obj. As you can see the value of "from" parameter is in quotation mark
18K
Vulncure
@vulncure
Dec 19, 2023
PART 2 ⤵️ 🍏 Exploit Nodejs Application To RCE In Part 1, We talked about the Nodejs global process that can used to get better control over system interactions We sawn that Nodejs Application wouldn't have sanitized the eval() . Well, Now we'll deal with the file system of
17K
Vulncure
@vulncure
Feb 3, 2024
Bug Report as Document 📄 Invanti : • 🐞 BUG: SSRF lead to RCE • 📄 CVE ID: 2024-21893 | CWE: 918 ✏️ Nuclei Template : vulncure.com/CVE-2024-21893… 📝 Notes & Exploitation : vulncure.com/CVE-2024-21893
9.6K
Vulncure
@vulncure
Feb 7, 2024
Bug Report as Document 📄 Oracle Weblogic Server : • 🐞 BUG: RCE • 📄 CVE ID: 2024-20931 | CWE: 94 📝 Notes & Exploitation : vulncure.com/CVE-2024-20931
8.5K
Vulncure
@vulncure
Jan 5, 2024
PART - #1 🕵️‍♂️🛠️ Let's Crack The Jenkins Instance 🔓 Before we deep dive into the exploitation, let's understand how we identify those instances 🕵️‍♂️ There are 2 Major IoT Search Engines 🌐 Shodan: • "X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Dashboard" 🖥️ •
12K
Vulncure
@vulncure
Dec 5, 2023
🦗CVE : CVE-2023-38146 CVE Series : #1 A High-Risk Windows Themes Vulnerability • Type: Remote Code Execution (RCE) ⚠️ • Affected Software: Windows 11 • CVSS Score: 8.8 (High Severity) Dive into the details 🧵:👇
16K
Vulncure
@vulncure
Feb 9, 2024
Bug Report as Document 📄 Shopify : • 🐞 BUG: IDOR🔄 • Severity: Medium (5.3) • Asset ☑️: Shopify • 🎉 Bounty Award: $5000 | Hackerone 📝 Notes with Explaination : vulncure.com/detailed-bug-b…
6.4K
Vulncure
@vulncure
Dec 16, 2023
BugBounty Reports in Thread 🧵 Bug: Able to approve admin approval and change effective status without adding payment details Type: Business Logic Errors Company: Reddit Siverity: High (7 ~ 8.9) Bounty: $5,000 Dive into the details 🧵:📷
14K
Vulncure
@vulncure
Apr 6, 2024
Bug Report as Document - #9📄 GraphQL : • 🐞 BUG : SQL Injection🔄 • Severity : Critical (10.0) • Asset ☑️: GraphQL • 🎉 Bounty Award : Not Known | Hackerone 📝 Notes with Explaination : vulncure.com/sql-injection-…
6.8K
Vulncure
@vulncure
Dec 14, 2023
(CVE-2023-42917) High-Severity WebKitGTK Vulnerability Key Points: • Type: Code Injection (CWE-94) ⚠️ • Affected Software: Apps using WebKitGTK • CVSSv3 Score: High Severity • Impact: Remote Code Execution via Malicious Web Content Dive into the details 🧵:📷 • A memory
10K
Vulncure
@vulncure
Mar 16, 2024
Bug Report as Document - #6📄 PortSwigger : • 🐞 BUG : Reflected-XSS🔄 • Severity : Medium (4 ~ 6.9) • Asset ☑️: PortSwigger • 🎉 Bounty Award : $1,500 | Hackerone 📝 Notes with Explaination : vulncure.com/csp-bypass-in-…
5.5K