<![CDATA[Stories by 0day stories on Medium]]> https://medium.com/@zerodaystories?source=rss-0c5030db523f------2 https://cdn-images-1.medium.com/fit/c/150/150/1*I-E0Gt_pLw23iS_YcGunQQ.jpeg Stories by 0day stories on Medium https://medium.com/@zerodaystories?source=rss-0c5030db523f------2 Medium Sat, 14 Nov 2026 01:30:42 GMT <![CDATA[Unpatched RCE in Laravel Voyager = Big Bounties! ]]>

Critical RCE vulnerability in Laravel’s popular admin panel

Continue reading on OSINT Team »

]]> https://osintteam.blog/unpatched-rce-in-laravel-voyager-big-bounties-2eb3ebb09253?source=rss-0c5030db523f------2 https://medium.com/p/2eb3ebb09253 Mon, 24 Feb 2025 17:44:23 GMT 2025-02-26T00:12:29.568Z <![CDATA[Bug Bounty Methodology: Exploiting Dev & Staging Environments for Maximum Bounty]]>

Why Dev & Staging Environments Are a Goldmine for Bug Hunters Seeking High-Value Exploits

Continue reading on Medium »

]]> https://medium.com/@zerodaystories/bug-bounty-methodology-exploiting-dev-staging-environments-for-maximum-bounty-414419faf744?source=rss-0c5030db523f------2 https://medium.com/p/414419faf744 Wed, 19 Feb 2025 15:41:03 GMT 2025-02-19T15:41:03.178Z <![CDATA[Top CVEs to Watch in 2025: Hunting Critical Bugs]]>

Hi Bug Bounty Hunters!!!

Continue reading on Medium »

]]> https://medium.com/@zerodaystories/top-cves-to-watch-in-2025-hunting-critical-bugs-3d7fee7ef95e?source=rss-0c5030db523f------2 https://medium.com/p/3d7fee7ef95e Mon, 17 Feb 2025 18:23:25 GMT 2025-02-17T18:23:25.215Z <![CDATA[From Cookie to P1: Exploiting a Simple Flaw for Maximum Impact]]>

Hackers can predict session tokens — giving them full access to private accounts.

Continue reading on InfoSec Write-ups »

]]> https://infosecwriteups.com/from-cookie-to-p1-exploiting-a-simple-flaw-for-maximum-impact-a05ef35c3e8c?source=rss-0c5030db523f------2 https://medium.com/p/a05ef35c3e8c Sat, 15 Feb 2025 17:24:40 GMT 2026-01-15T05:56:09.094Z <![CDATA[Admin Panel Exploit Leaks 1 Million User Records on Logitech]]>

How an unexpected misconfiguration in an admin panel led to the exposure of 1 million user records

Continue reading on OSINT Team »

]]> https://osintteam.blog/admin-panel-exploit-leaks-1-million-user-records-on-logitech-3c0b20189d30?source=rss-0c5030db523f------2 https://medium.com/p/3c0b20189d30 Fri, 31 Jan 2025 10:12:56 GMT 2025-02-01T01:56:12.197Z <![CDATA[Critical Blind SQL Injection leads to  $4,134 (7/30 DAYS)]]>

Understanding the Risk: How a Blind SQL Injection Was Discovered in inDrive.

Continue reading on InfoSec Write-ups »

]]> https://infosecwriteups.com/critical-blind-sql-injection-leads-to-4-134-7-30-days-d8918ff3d2d0?source=rss-0c5030db523f------2 https://medium.com/p/d8918ff3d2d0 Wed, 15 Jan 2025 14:45:41 GMT 2025-01-18T17:48:09.955Z <![CDATA[Exposing HTML Injection:$500 Bounty (6/30DAYS)]]>

How a Researcher Earned $500 for Uncovering a Dangerous HTML Injection Flaw !!!

Continue reading on OSINT Team »

]]> https://osintteam.blog/exposing-html-injection-500-bounty-6-30days-e4d3a0344bcd?source=rss-0c5030db523f------2 https://medium.com/p/e4d3a0344bcd Wed, 08 Jan 2025 17:20:58 GMT 2025-01-10T01:54:22.214Z <![CDATA[Account Deletion Flaw Exposes Chats, Researcher Gets $1,000 (5/30DAYS)]]>

Uncovering the Chat Privacy Vulnerability and How It Was Fixed

Continue reading on Medium »

]]> https://medium.com/@zerodaystories/account-deletion-flaw-exposes-chats-researcher-gets-1-000-5-30days-d51245c30c65?source=rss-0c5030db523f------2 https://medium.com/p/d51245c30c65 Sun, 05 Jan 2025 17:44:09 GMT 2025-01-05T17:44:09.696Z <![CDATA[Improper Access Control in APIs Earns $3,900 Bounty(4/30 DAYS)]]>

I’m a security researcher, and I’ve taken on the challenge of explaining one bug bounty report every day for the next 30 days — 30 days, 30

Continue reading on Medium »

]]> https://medium.com/@zerodaystories/improper-access-control-in-apis-earns-3-900-bounty-4-30-days-5a8668695b84?source=rss-0c5030db523f------2 https://medium.com/p/5a8668695b84 Fri, 03 Jan 2025 16:24:15 GMT 2025-01-03T16:24:15.295Z <![CDATA[This Simple GraphQL SSRF Bug Earned $3,000 (3/30 DAYS)]]>

I’m a security researcher, and I’ve taken on the challenge of explaining one bug bounty report every day for the next 30 days — 30 days…

Continue reading on Medium »

]]> https://medium.com/@zerodaystories/this-simple-graphql-ssrf-bug-earned-me-3-000-3-30-days-9bd13e2c2f9d?source=rss-0c5030db523f------2 https://medium.com/p/9bd13e2c2f9d Wed, 01 Jan 2025 17:42:53 GMT 2025-01-02T03:15:12.027Z