writeups.xyz writeups.xyz / Sagar Sajeev (@Sagar__Sajeev)

Title Vulnerabilities Programs Authors
Escalating SSTI to Reflected XSS using curly braces {}
Unsubscribe any user’s e-mail notifications via IDOR
Business Logic Vulnerability via IDOR
An Unusual Tale of Email Verification Bypass
Escalating Open Redirect to XSS
File Upload Bypass to RCE == $$$$
Business logic vulnerabilities
DoS worth $650 ? Interesting right!