AgileHunt's Blog - Guarding your innovation.

Blog posts

Uncovering Web Cache Deception: A Missed Vulnerability in the Most Unexpected Places
September 4, 2023
VULNERABILITY DESCRIPTION This vulnerability involves a Web Cache Deception attack targeting the https://redacted.com/anynonexisting URL endpoint. ...
- security
- Read more
- 3 comments
CVE-2023-1906 - Heap-based Buffer Overflow in ImageMagick
April 6, 2023
As part of our security research efforts , we recently used AFL++ (American Fuzzy Lop) to fuzz test ImageMagick, an open-source software suite for ...
- Read more
Clipchamp ( Microsoft Office Product) - Google IAP Authorization bypass allowed access to Internal Environment Leading to Zero Interaction Account takeover
March 10, 2023
Before getting started reported product Clipchamp is not under the scope for MSRC bug bounty rewards so don't waste your precious time on this asse...
- security
- Read more
Race Condition vulnerability in Azure Video Indexer allowed trial account users use Advance / Premium feature
December 7, 2022
VULNERABILITY DESCRIPTION The Microsoft Azure's services App Videoindexer.ai ( https://vi.microsoft.com/en-us) has a feature known as "Animated ...
- Read more
- 2 comments
Privilege Escalation in Microsoft Teams
December 7, 2021
Vulnerability Description While researching the Microsoft Teams web application which is part of the Microsoft Bug Bounty program (https://www.mic...
- security
- Read more