Microsoft Paid them $20k for finding one of a kind XSS bug in Edge

The Backend Engineering Show with Hussein Nasser

Episode | Podcast

Date: Mon, 28 Jun 2021 15:55:41 GMT

<p>@MrRajputHacker @Th3Pr0xyB0y found critical universal XSS (an XSS that affects the entire browser, not just one page) on Microsoft Edge. They responsibly reported the bug and detailed it in their article. Let us discuss</p> <p>Resources</p> <p>https://cyberxplore.medium.com/how-we-are-able-to-hack-any-company-by-sending-message-including-facebook-google-microsoft-b7773626e447</p> <p>https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security</p> <p>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34506</p> <p>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34475</p> <p>Support my work on PayPal</p> <p>https://bit.ly/33ENps4</p> <p>Become a Member on YouTube</p> <p>https://www.youtube.com/channel/UC_ML5xP23TOWKUcc-oAE_Eg/join</p> <p>🧑‍🏫 Courses I Teach</p> <p>https://husseinnasser.com/courses</p>