CVE Hunting Made Easy
projectblack.io
In just three Sunday afternoons, I discovered 14 CVEs - and you can too! CVE hunting is more accessible than many realise, and the methodology outlined here requires only a bit of coding knowledge.
The original post: /r/netsec by /u/ezzzzz on 2024-08-27 20:39:06.

Original Title: I found 14 CVEs by downloading every Wordpress plugin and scanning all of it with Semgrep - full dataset published if you want to do some sifting yourself, there’s plenty of output I haven’t looked at.