-
# 每日安全资讯（2023-07-22）
- HackerOne Hacker Activity
- [ ] [Password reset endpoint is not brute force protected](https://hackerone.com/reports/1987062)
- 先知安全技术社区
- [ ] [SCA技术进阶系列（三）：浅谈二进制SCA在数字供应链安…
-
### Issue URL (Incorrect Blocking)
[https://pedia.watcha.com/ko-KR/contents/m5eJwn9](https://adguardteam.github.io/AnonymousRedirect/redirect.html?url=https%3A%2F%2Fpedia.watcha.com%2Fko-KR%2Fcont…
-
This should be enough to explain what the problem is:
The website needs to connect to `ws://…
-
# 每日安全资讯（2023-05-31）
- HackerOne Hacker Activity
- [ ] [Account takeover due to insufficient URL validation on RelayState parameter](https://hackerone.com/reports/1923672)
- [ ] [Blind SSRF as no…
-
# 每日安全资讯（2023-07-06）
- HackerOne Hacker Activity
- [ ] [Improper Authentication inside the Rockstar Games Launcher which leads to Account takeover to some extend](https://hackerone.com/reports/1442…
-
### Support guidelines
- [X] I've read the [support guidelines](https://github.com/firefly-iii/firefly-iii/blob/main/.github/support.md)
- [X] My request is not listed as [a very good idea, but unfor…
-
Multiple threat actors have been observed using two new variants of the IcedID malware in the wild with more limited functionality that removes functionality related to online banking fraud.
IcedID,…
-
### Prerequisites
- [X] This is not a support issue or a question. For support, questions, or help, visit [/r/uBlockOrigin](https://www.reddit.com/r/uBlockOrigin/).
- [X] I performed a [cursory searc…
-
### Please confirm these before moving forward
- [X] I have searched for my issue and not found a work-in-progress/duplicate/resolved issue.
- [X] I have not been informed if the issue is resolved in…
-
#### Which domain(s) should be blocked?
h-sdk.online-metrix.net
online-metrix.net.
#### Why should the domain(s) be blocked?
Online tracker, cross-site tracker.
Used on eBay and other iOS/android…