Romesh chander·5h agoMyBounty Mobile AppA Bug Bounty / reward calculator for security researchers and program managers.
Mohamed Nowisar·6h agoHow I Bypassed 2FA by Changing One Request Parameter — and Earned a $$$ Bountyالحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي الناسِ الخير محمد أما بعدA response icon2A response icon2
T4nv1·7h agoTwo Rulers, One Wire: How an HTTP Desync Earned a First-Time Hunter $6,500 from SlackA technical deep dive into CL.TE request smuggling, why it turns “a parsing quirk” into mass session theft, and a toy parser you can run…
Abhishek meena·7h agoMeta Paid $1.2 Million to Break Its Own AI Agent. The Biggest Bug Wasn’t Even an AI Bug.Bugs.
Akash motkar·8h agoP3 — Insecure Direct Object Reference (IDOR) in User Profile APISeverity: Medium (P3) Vulnerability Type: Broken Object-Level Authorization (BOLA / IDOR) CWE: CWE-639 — Authorization Bypass Through…
Vigneshkumaroffsec·12h agoThe Confused Deputy, 2026 EditionWhy AI agents keep reintroducing the vulnerability classes we already knew how to fix — and the one principle that stops all of them.
InMeetCyberbyRaj Namdev·12h agoI Built a Self-Updating Bug Bounty Skill From 200 Reports.A leaderboard is not a distribution.
InOSINT TeambyVipul Sonule·15h agoSupply Chain Attacks: How Hackers Compromise npm PackagesA practical, lab-safe guide to npm supply chain security: typosquatting, dependency confusion, account takeover, malicious install scripts,
