Escalating SSTI to Reflected XSS using curly braces {} |
|
|
|
Unsubscribe any user’s e-mail notifications via IDOR |
|
|
|
Business Logic Vulnerability via IDOR |
|
|
|
An Unusual Tale of Email Verification Bypass |
|
|
|
Escalating Open Redirect to XSS |
|
|
|
File Upload Bypass to RCE == $$$$ |
|
|
|
Business logic vulnerabilities |
|
|
|
DoS worth $650 ? Interesting right! |
|
|
|