bug-bounty625
facebook443
xss316
google119
rce106
microsoft66
csrf60
web355
account-takeover55
writeup50
malware43
sqli41
apple41
exploit40
ssrf35
cve34
privilege-escalation34
dos34
cloudflare29
defi28
phishing25
smart-contract-vulnerability25
access-control25
ethereum24
smart-contract24
clickjacking24
idor24
subdomain-takeover24
vulnerability-disclosure23
remote-code-execution21
auth-bypass19
lfi18
race-condition16
cloud15
authentication-bypass15
cors15
solidity15
node15
aws14
reverse-engineering13
oauth13
web-security12
sql-injection12
supply-chain12
denial-of-service11
info-disclosure11
browser11
delegatecall11
web-application-security11
vulnerability10
0
vulnerability
0
bug-bounty
A subdomain takeover vulnerability was discovered on Starbucks where an unclaimed CNAME pointing to a non-existent Azure Traffic Manager subdomain (s00149tmppcrpt.trafficmanager.net) could be hijacked by registering the Traffic Manager profile without domain ownership verification. The researcher was awarded a $2,000 bounty for this finding.
subdomain-takeover
azure
azure-traffic-manager
dns
cname
nxdomain
bug-bounty
domain-takeover
misconfiguration
security-research
Starbucks
Microsoft Azure
Azure Traffic Manager
wfmnarptpc.starbucks.com
s00149tmppcrpt.trafficmanager.net
trafficmanager.net
Patrik Hudak
0
security
0
0
0
security
0
0
0
security
0
security
0
0
0
0
bug-bounty
0
security
0
0
authentication
0
0
0
security
0
security
0
security
0
security
0