Password Reset | writeups.xyz

Title	Vulnerabilities	Programs	Authors
thisclosed_#1 - Full Account Takeover of ANY user via Insecure Direct Object Reference (IDOR) on reset password functionality	IDOR Password Reset Account Takeover	Undisclosed	Samuele Gugliotta (@Indevi0us)
P5 to P1: Interesting Account Takeover	Account Takeover Session Expiration Issue Password Reset	Undisclosed	Tushar Sharma (@TusharSharma_0)
Zero Click To Account Takeover	Account Takeover Password Reset	Undisclosed	M7.Arman (@ArmanSecurity)
Account Takeover in $Million Company?	Account Takeover Password Reset	Fastmail	0xGodson (@0xGodson_)
500$ Bug: Sensitive Data Exposure to Broken Access Control leads, How I able to take over any account of India’s Biggest College Ever.👨‍💻	OTP Bypass Account Takeover Password Reset	Undisclosed	Gowtham_Naidu (@NaiduPonnana)
Bug-Bounty \| FASTMAIL [pobox.com : account takeover]	Account Takeover Password Reset	Fastmail	Mohammed ELdawody
[$5K] Misconfigured Reset password that leads to Account Takeover (No user Interaction ATO)	Account Takeover Password Reset Information Disclosure	Undisclosed	Aditya Sharma (@Assass1nmarcos)
Timing Attack on SQL Queries Through Lobste.rs Password Reset	Timing Attack Password Reset	Lobste.rs	Soatok (@SoatokDhole)
Account Takeover (User + Admin) Via Password Reset	Account Takeover Password Reset Logic Flaw	Undisclosed	Hemant Patidar (@HemantSolo)
The journey from Google Honorable Mention to Hall of Fame.	Referer Leakage Information Disclosure Password Reset	Google	Akash Basnet (@Noneofyou007)
Bug Chain leads to Mass Account Takeover!	Information Disclosure Password Reset Account Takeover	Undisclosed	Shubhayu Majumdar (@Shubhayu64)
You’ve Got (a Reset) Mail: A Security Analysis of Email-Based Password Reset Procedures	Password Reset Host Header Injection CSRF Account Takeover	Undisclosed	Tommaso Innocenti (@Innotommy) Ali Mirheidari Amin Kharraz (@Amin_kharaz) Bruno Crispo Engin Kirda
Forgot password? Taking over user accounts Kaminsky style	IP Fragmentation Attack Kaminsky Attack Password Reset Account Takeover DNS	Undisclosed	Timo Longin (@Timolongin)
Critical Bug Bounty Reports: Part 1	Account Takeover Password Reset RCE Information Disclosure	Undisclosed	Greg Gibson
Account Takeovers — Believe the Unbelievable	Account Takeover Session Management Issue Weak Credentials Components With Known Vulnerabilities Password Reset	Undisclosed	Nikhil (Niks) (@Niksthehacker)
Facebook Email/phone disclosure using Binary search	Password Reset Information Disclosure Bruteforce	Meta / Facebook	Rikesh Baniya (@Rikeshbaniya)
How I was able to Takeover Accounts on Foxit.com	Password Reset Account Takeover	Undisclosed	Jefferson Gonzales (@Gonzxph)
Zero Click account Takeover	Account Takeover Password Reset	Undisclosed	Zahir Tariq (@ZahirTariq3)
Joomla Password Reset Vulnerability And A Stored XSS For Full Compromise	Password Reset Stored XSS Privilege Escalation RCE Security Code Review	Undisclosed	Adrian Tiron (@Adrian__t)
Drupal Insecure Default Leads To Password Reset Poisoning	Password Reset Host Header Injection	Drupal	Bogdan Tiron (@Bogdan___T)
My Fourth Account takeover through password reset	Account Takeover Password Reset	Undisclosed	Omar Hamdy (@Seaman00o)
Password reset code brute-force vulnerability in AWS Cognito	Password Reset Bruteforce Rate Limiting Bypass Account Takeover	AWS	Pentagrid (@Pentagridsec)
From Wayback Machine To Account Takeover	Account Takeover Password Reset Open Redirect	Undisclosed	Demon (@R29k_)
Misconfiguration in Change-password Functionality Leads to Account Takeover	IDOR Logic Flaw Password Reset Account Takeover	Undisclosed	Mahmoud Radwan (@0x___2m) Mahmoud Samaha (@0x__2m)
Unauthenticated Account Takeover Through Forget Password	Password Reset Account Takeover Information Disclosure	Undisclosed	Nikhil (Niks) (@Niksthehacker)

Page 3 of 6