Все публикации

0:00:10

XSS on Home page olx.com.ar via auto save search text | POC

0:03:37

Cross-Site Request Forgery (CSRF) | POC -1

0:02:45

Cross-Site Request Forgery (CSRF) | POC

0:00:32

CSV Injection | POC

0:00:39

Bypass CSV Injection at Camptix Event Ticketing | POC | $100

0:02:15

HOST HEADER INJECTION in rpm.newrelic.com | POC

0:00:43

Creating Post on a restricted channel - 2 | POC | $500

0:02:03

Creating Post on a restricted channel - 1 | POC | $500

0:00:17

target='_blank' Vulnerability Resulting in Critical Phishing Vector | POC

0:00:53

Stored XSS on team.slack.com | POC | $1000

0:01:15

Legal | Application is Missing CSP(Content Security Policy) Header | POC | N/A

0:01:18

Reflected Self-XSS Vulnerability in the Comment section of Files Information | POC | $100

0:01:01

Link reset problem - 2016 H1 report - N/A

0:01:16

XSS ATO (via login keylogger, link Google account) | POC - 1

0:03:18

/vc/blog/info.php script is prone to reflected HTML/CSS injection and COOKIE leak | POC | $100

0:04:02

Too much resource consumption of the server due to incorrect datarange control via reports?dateFrom=

0:00:16

wp-embed XSS on Safari | POC | $300

0:00:34

XSS on Brave Today through custom RSS feed | POC | $500

0:04:15

Basic auth header on WebDAV requests is not bruteforce protected | POC | $750

0:00:39

Stored XSS via Kroki diagram | POC | $13950

0:00:26

Open redirect due to scanning QR code via brave browser | POC | $500

0:03:18

Reflected HTML/CSS injection and Cookie leak | POC | $100

0:00:11

Reflected XSS Via origCity Parameter (UPPER Case + WAF Protection Bypass) | POC | $300

0:01:13

Unauthenticated Cache Purging | POC