159 - Github To Gitlab Rce And A New Php Supply Chain Attack [bug Bounty Podcast]
Synopsis
This week we look at a insecure deserialization (GitLab), argument injection (Packagist), and insecure string interpolation ...
You Might Also Like
![131 - GitLab Arbitrary File Read and Bypassing PHP's filter_var [Bug Bounty Podcast]](https://i.ytimg.com/vi/9do25sS-bo8/hq720.jpg?sqp=-oaymwEcCNAFEJQDSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBp5Pl_oOXmXs9I1JgzZ2ImYfiRhw)
![235 - A GitLab Account Takeover and a Coldfusion RCE [Bug Bounty Podcast]](https://i.ytimg.com/vi/LtkPI3YEAkg/hq720.jpg?sqp=-oaymwEcCNAFEJQDSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLCR-HRc7mn5yOBWyXTPf7DFbT11CQ)
![147 - Stealing GDrive Tokens, a GitLab Bug, and macOS "Powerdir" Vulnerability [Bug Bounty Podcast]](https://i.ytimg.com/vi/CnabSTu6xP0/hq720.jpg?sqp=-oaymwEcCNAFEJQDSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLCr1y38wMwFklAB94WbRU2BOKGibg)
![207 - Git Config Injection and a Sophos Pre-Auth RCE [Bug Bounty Podcast]](https://i.ytimg.com/vi/lYHt-2qXnTY/hq720.jpg?sqp=-oaymwEcCNAFEJQDSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLDiV2THOAz98hnLrPp1skFS12OgbA)
Download Options
Choose a download method below. All links open in new tabs.
| Service | Features | Action |
|---|---|---|
| Ssvid |
MP4 & MP3 • HD Quality • Browser Extension Available
|
Download |
| SaveFrom |
MP4 & MP3 • HD Quality • Browser Extension Available
|
Download |
Security Notice: These are third-party services. We recommend using antivirus software and being cautious of pop-up ads.