243 - GhostCMS, ClamAV, and the Top Web Hacking Techniques of 2023 [Bug Bounty Podcast]

In this bounty episode, some straightforward bugs were disclosed in GhostCMS and ClamAV, and Portswigger publishes their top 10 list of web hacking techniques from 2023.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/243.html

[00:00:00] Introduction
[00:02:15] Ghost CMS Stored XSS Leading to Owner Takeover [CVE-2024-23724]
[00:16:07] ClamAV Not So Calm [CVE-2024-20328]
[00:21:00] Top 10 web hacking techniques of 2023
[00:44:46] Hacking a Smart Home Device
[00:48:15] Cloud cryptography demystified: Amazon Web Services

The DAY[0] Podcast episodes …

bounty bug bug bounty bugs clamav cms cve ghost hacking introduction list podcast portswigger stored xss takeover techniques top 10 web web hacking xss