hgr00x·Aug 7Small OAuth Implementation Flaws Can Lead to Account Binding Vulnerabilities.بِسْمِ اللَّهِ رَبِّ الْعَالَمِينَ، نَاصِرُ الْمُجَاهِدِينَ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى رَسُولِنَا الْأَمِينِ.A response icon1A response icon1
hgr00x·Jun 1Business Logic Flaw Combined with Broken Access Control Leads to Adminless Organization State.بِسْمِ اللَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ، عَلَّمَ الإِنسَانَ مَا لَمْ يَعْلَمْ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى خَيْرِ مُعَلِّمٍ.
hgr00x·Apr 29Broken Access Control in Order Export via Reusable Token After Permission Revocation.بِسْمِ اللهِ الْوَاحِد، وَالصَّلَاةُ وَالسَّلَامُ عَلَى نَبِيِّنَا مُحَمَّدٍ، النَّبِيِّ الشَّهِيدِ الْمُجَاهِدِA response icon4A response icon4
hgr00x·Dec 10, 2025Business-logic vulnerability leading to the Owner’s inability to manage tags..بِسْمِ اللهِ الْوَاحِد، وَالصَّلَاةُ وَالسَّلَامُ عَلَى نَبِيِّنَا مُحَمَّدٍ، النَّبِيِّ الشَّهِيدِ الْمُجَاهِدِA response icon2A response icon2
hgr00x·Dec 4, 2025Business Logic flaw in role assignment allows privilege persistence and prevents user removalقَالَ اللَّهُ تَعَالَى: “يَرْفَعِ اللَّهُ الَّذِينَ آمَنُوا مِنكُمْ وَالَّذِينَ أُوتُوا الْعِلْمَ دَرَجَاتٍ ۚ وَاللَّهُ بِمَا تَعْمَلُونَ…A response icon4A response icon4
hgr00x·Nov 20, 2025Business-logic vulnerability leading to permanent account lockout and inability to upgrade to Pro.بِسْمِ اللهِ نخطّ الكلمات، وبه تُفتَحُ البركات، وعلى نبيّه أفضل الصلواتA response icon2A response icon2
hgr00x·Nov 13, 2025Logic vulnerability caused by improper input validation (homoglyph bypass)بِسْمِ اللَّهِ الرَّحْمَنِ الرَّحِيمِ وَالصَّلَاةُ وَالسَّلَامُ عَلَىٰ خَاتَمِ النَّبِيِّينَ وَالْمُرْسَلِينَ.A response icon7A response icon7
hgr00x·Oct 21, 2025Business-logic vulnerability via special characters: attacker persists in victim organizationبِسْمِ اللَّهِ رَبِّ الْعَالَمِينَ، نَاصِرُ الْمُجَاهِدِينَ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى رَسُولِنَا الْأَمِينِ.A response icon7A response icon7
hgr00x·Oct 2, 2025Business‑Logic Vulnerability Leading to Organization‑Wide Account Lockout and Invalid Accountsبِسْمِ اللَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ، عَلَّمَ الإِنسَانَ مَا لَمْ يَعْلَمْ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى خَيْرِ مُعَلِّمٍ.A response icon1A response icon1
hgr00x·Sep 19, 2025Null Byte Breakthrough: How I Bypassed duplicate resource creation.قَالَ اللَّهُ تَعَالَى: “يَرْفَعِ اللَّهُ الَّذِينَ آمَنُوا مِنكُمْ وَالَّذِينَ أُوتُوا الْعِلْمَ دَرَجَاتٍ ۚ وَاللَّهُ بِمَا تَعْمَلُونَ…A response icon8A response icon8
