samuel·Oct 27Business Logic Flaw: Free Checkout via Coupon StackingIntigriti October Challenge (1026) — Web Application Write-up
Yousef·Oct 22Security Write-Up: Authentication Bypass via Response Manipulation on Email Change Feature“وَمَا تَوْفِيقِي إِلَّا بِاللَّهِ ۚ عَلَيْهِ تَوَكَّلْتُ وَإِلَيْهِ أُنِيبُ”A response icon1
Mohamed Abdelmoatie (3at3ot)·Oct 12I Asked How Guests Get Their Identity — and Found a Meeting Logic Flaw1. The Initial Clue: Understanding How Guests Are IdentifiedA response icon3
Rohmad Hidayah·Sep 25Pages can join private Facebook groups via invitationA Page can join a private Facebook group via an invitation, even if the “Who can join the group” setting is configured to “Only profiles”.
Cybernerddd·Sep 13Logic Over Linting: How a Negative Service Charge Broke a Live Ticket CheckoutAs security researchers, we often spend our days hunting for the flashy bugs. We look for complex Cross-Site Scripting (XSS) payloads, hunt…
