writeups.xyz writeups.xyz / Ahmad Halabi (@Ahmad_Halabi_)

Title Vulnerabilities Programs Authors
The ART of Chaining Vulnerabilities
From Revealing Emails to Taking Over Accounts (Hacking Telecom)
PII Disclosure of Apple Users ($10k)
Simple HTML Injection to $250
RCE via Internal Access to Adminer Database Management (Critical)
Finding Hidden Login Endpoint Exposing Secret `Client ID`
Secret Key Exposure in API Config Directory
Chaining Multiple Requests to Achieve Rate Limiting Vulnerabilities