huntr

Great news, huntrs... 🐰 We're excited to introduce Gradual, our new community space made just for YOU! Connect with other huntrs, check out our latest blog posts, watch must-see videos, and join virtual events that'll level up your AI/ML bug bounty hunting skills. If you have a huntr account, you’re already set up with SSO. Have questions? Just PM our team – we're here to help. Ready to level up? Sign up at https://bit.ly/3VSoNrX #huntr #bugbounty #aisecurity #gradual

Have you checked this out yet? 👇 Our huntr, Nhiên Phạm (aka nhienit), uncovered CVE-2024-5443 in a large language model server by bypassing a path traversal filter, leading to malicious code execution through the ExtensionBuilder function. Catch all the details of his discovery here: https://hubs.ly/Q02L-NL30 And for you huntrs looking to get your work in the spotlight, drop us a PM! 💬 #huntr #bugbounty #remotecodeexecution

Ever dealt with arbitrary file deletion through directory traversal? In gaizhenbiao/chuanhuchatgpt, a directory traversal vulnerability allows attackers to delete critical files through improper handling of JSON inputs. These types of flaws can easily go unnoticed, but their impact is severe. How are you securing your AI/ML projects from such attacks? Check out the full report here >> https://hubs.ly/Q02LQWXP0 Yet another great find by one of our huntrs, M Nadeem Qazi (Mo Nadeem). Keep it up!👏 #huntr #bugbounty #aisecurity

Just added two new AI/ML repositories to huntr - composio and agentscope. 🏹 If you haven’t heard, composio gives AI agents the tools they need to connect with external systems and handle tasks automatically, while agentscope is all about building autonomous agents that can make smart, real-time decisions. Uncover vulnerabilities, help make these systems more secure, and get rewarded along the way huntrs! 💡💰 Get to hunting: https://hubs.ly/Q02LFvlz0

The August Vulnerability Report from Protect AI is OUT, and it’s packed with 20 fresh vulnerabilities uncovered by our huntr community. 🔥 One that stands out? A Remote Code Execution (RCE) in Setuptools—this vulnerability allows attackers to inject and execute arbitrary commands on the system through specially crafted package URLs. If you're working in AI/ML, this is a critical risk that could lead to full system takeovers. Definitely one to keep on your radar. Check out the full list of vulns and see if your bug made the cut: https://hubs.ly/Q02LrqZS0 Jump in and get started on huntr—your next big find could be just around the corner 👉 https://hubs.ly/Q02LrmkD0 #huntr #aisecurity #bugbounty

Wow, what a whirlwind! We're still buzzing from an incredible week at Black Hat and DEF CON. We had the chance to connect with some truly amazing people—from seasoned pentesters to fresh faces in the hacking community. Sharing our passion for AI/ML bug bounty hunting and security, passing out exclusive swag, and handing over our one-of-a-kind challenge coins made it all the more special. If you were lucky enough to snag one, welcome to the club. 👋 🐰 Keep the momentum going by joining us at https://hubs.ly/Q02L8wf00, and if you're ready to dive even deeper, connect with our vibrant community on Discord at https://hubs.ly/Q02L8FQD0. #blackhat24 #defcon32 #huntr #bugbounty #aisecurity

Heading to Black Hat or DEF CON next week? 👀 Be sure to swing by booth 2169 at Black Hat to meet Dan McInerney, Marcello S., and the rest of the huntr team. We’ll also be mingling at DEF CON, so keep an eye out for us! We’re bringing tons of exclusive huntr swag and a special surprise for those who stop by. So, don’t miss out—come say hi. 👋 #blackhat24 #defcon24 #huntr #bugbounty

We’ve just released a new blog post diving into the details of a critical Path Traversal vulnerability in parisneo/lollms, discovered by our talented huntr Nhiên Phạm (aka NhienIT). 👇 Nhien’s detailed breakdown of CVE-2024-5443 highlights how empty strings bypassed sanitization and how indirect function calls led to malicious code execution. A big thank you to Nhien for sharing this with our community. It’s a great example of the depth and detail needed to uncover these kinds of vulnerabilities. 👏 Check out the full post here: https://hubs.ly/Q02JBXTV0 If you're looking to showcase your work and expertise, reach out to the huntr team on Discord: https://hubs.ly/Q02JBXVW0 🐰 #huntr #aisecurity #bugbounty

Catch up on all of our 'Between Two Vulns' episodes! 🎥 Our community is growing stronger every day, and we're excited to share all episodes of 'Between Two Vulns' with you on Gradual. Whether you're new to huntr or a seasoned pro, there's always something to learn. Sign up for our community platform and check out all the episodes here: https://hubs.ly/Q02JgdfK0 #huntr #aisecurity #bugbounty

Meet our latest huntr spotlight, mnqazi! 👏 Not only is M Nadeem Qazi (Mo Nadeem)'s, also known as mnqazi, journey into AI/ML bug bounty hunting worth reading, but he’s also uncovered a critical security flaw in the ChuanhuChatGPT project. This issue involved improper access control, allowing unauthorized users to access private chat histories. Curious about how he did it and his journey into AI/ML bug bounty hunting? Dive into his detailed process and read his full story here: 🔗 https://hubs.ly/Q02HVnRq0 Want to know how you could be next? Reach out to our team on Discord 👉 https://hubs.ly/Q02HVnzz0 #huntrspotlight #aisecurity #bugbounty #huntr