213 - Jellyfin Exploits and TOCTOU Spellcasting

Another bug bounty podcast, another set of vulnerabilities. Starting off with a desktop info-disclosure in KeePass2 that discloses master passwords to attackers (with a high-level of access). A couple Jellyfin bugs resulting in an RCE chain, and a pretty classic crypto issue that allowed for renting luxury cars for extremely cheap.

access attackers bounty bounty-podcast bug bug bounty bugs cars crypto desktop disclosure exploits high info issue master passwords podcast rce renting toctou vulnerabilities