writeups.xyz writeups.xyz / Logic Flaw

Title Vulnerabilities Programs Authors
Exploiting Amazon active vulnerability
Abusing Facebook’s feature for a permanent account confusion(logic vulnerability)
A business Logic issue worth $1500
Vulnerability in Huawei's AppGallery can download paid apps for free
Business Logic Errors - Art of Testing Cards
Package Planting: Are You [Unknowingly] Maintaining Poisoned Packages?
Unlock any blur text/picture without membership/subscription on Scribd.com |By Neuchi
The Bug That Kept On Giving :: PaymentBypass :: Eposed Return Url
View Friends List of any users using “View as” | Facebook Bug bounty
GitHub Cache Poisoning
How Token Misconfiguration can lead to takeover account
Bypass confirmation to add payment method.
Demographic Misconfiguration on Facebook live
How I Was Able To Wipe Any Registered Account
Some critical vulnerabilities found with passive analysis on bug bounty programs explained
A Weird Price Tampering Vulnerability
Bypassing default visibility for newly-added email in Facebook(Part I - Submitting I.D)
Stealing a few more GitHub Actions secrets
How I could’ve bypassed the 2FA security of Instagram once again?
Send a Email to me and get kicked out of Google Groups !! — #GoogleVRP — A Feature that almost broke Google Groups !!
Bug Report; Bypassing Weekly Limits In Basic (Free) LinkedIn Account
My first report on HackerOne: A logic flaw in npm
Google Security Misconfiguration Leads to Account Takeover !
IDOR vulnerability on invoice and weak password reset leads to account take over
How I could have read your confidential bug reports by simple mail?