writeups.xyz / Critical vulnerability on TP-Link service or how I got 0$

Submitter : c2a

Date: 1 June 2023

Bounty : undisclosed

Vulnerabilities :

• Account Verification Bypass
• IDOR
• Information Disclosure
• Account Takeover

Programs :

• TP-Link

Authors :

• Serj Novoselov (@Novoselov_s)

Link :
https://infosecwriteups.com/critical-finding-on-tp-link-service-or-how-i-got-0-fc86a0e52eaf