Mostafa Waleed·Oct 18How I Bypassed a Region-Locked Comment Feature on a Public Bug Bounty ProgramA comment feature was blocked in my country, but it still worked fully through the API.
OctaYus·Oct 7NO AI, How I Exposed a Database Without Injecting AnythingHey friends, In this article/write-up I’ll be sharing with you how I was able to find a very stupid vulnerability that exposed database…A response icon1A response icon1
Scrutalis·Sep 30The Perfect Phishing ⚔️First of all, hello everyone. I am a researcher with little experience, but I often find myself daydreaming about exploits and exploit…
Ankit Rathva aka Gujarati Hacker·Sep 30When Deleting the Default Workspace Made the Entire Account UnusableWhile testing a web application for broken access control issues, I came across an interesting case where a workspace that was supposed to…A response icon1A response icon1
Hossam Hamada·Sep 29How I Bypassed an OTP Verification Limit by Chaining Multiple Logic FlawsI’m Hossam Hamada, a security researcher and bug bounty hunter. During an authorized security assessment, I discovered an interesting OTP…A response icon4A response icon4
Its Not Nicole·Sep 19I Read The Policies So You Don’t Have To; Bugcrowd (Vulnerability Reporting Platform)A privately owned company formed in 2012, Bugcrowd don’t post their financial information publicly, and any estimates for annual recurring…
Adrian Dacka·Sep 12One Symlink to Root — A Full Walkthrough: From Chat Messages to a Root Shell Inside ChatGPT’s Code…A documented, account-scoped assessment of ChatGPT’s code-interpreter sandbox: the protocol flaw that enabled tool execution, the…
Mohammed Ashraf·Sep 8How I Could Have Shut Down Every Restaurant in Europe With One ClickI found a Broken Access Control vulnerability that could let one restaurant modify another restaurant’s delivery zones.A response icon1A response icon1
Mohammed Ashraf·Aug 27One Restaurant Account. 23,000+ Order IDs. One Very Big MQTT ProblemWhile testing a partner-facing live order dashboard, I found that a valid low-privilege restaurant account could connect to the…
n0RollBack·Aug 20How a Single Unauthenticated Endpoint Let Me Reach NASA's Internal NetworkAn unauthenticated SSRF in NASA Solar System Trek, from public recon to a signed Letter of Recognition
