writeups.xyz writeups.xyz / Logic Flaw

Title Vulnerabilities Programs Authors
How I Was Able to delete any facebook story where am I mentioned or tagged
GitHub Actions check-spelling community workflow - GITHUB_TOKEN leakage via advice.txt symlink
Business Logic Errors - Must Vote
Full PoC | Metasploit Pro Trial License Request Limit Bypass
Business Logic Ratings Bug
Vulnerability in Bumble dating app reveals any user's exact location
Hey Google ! - Delete my Data Properly — #GoogleVRP
Disclose WhatsApp Number of Instagram Accounts Despite Setting Set to be Hidden
Facebook Bug:Invite user to Like a Page even after they decline the Page Like Invite
How I Bought a £240.00 Annual Subscription for Bargain £0.01
Access to CrowdTangle Deletion Framework API
Account Takeover (User + Admin) Via Password Reset
Story OF MY 3RD Bounty From Facebook
Part 2: Dive into Zoom Applications
Let’s cancel the subscription (informative)
Microsoft Store free purschase vulnerabilites
Three Microsoft Store vulnerabilites
One-click DOS via Response Manipulation
Part-1 Dive into Zoom Applications
[Google VRP] Privilege escalation on https://dialogflow.cloud.google.com
How I found the silliest logical vulnerability for $750 that no one found for 3 years
Author spoofing in Google Colaboratory
How I could have accessed all your private videos/photos saved inside your device without even unlocking it?
Shopify Multipass Misconfiguration
Third-Party Apps were still getting your private Facebook data even after their access expiry.