PinnedInInfoSec Write-upsby0day stories·Feb 15, 2025From Cookie to P1: Exploiting a Simple Flaw for Maximum ImpactHackers can predict session tokens — giving them full access to private accounts.
PinnedInInfoSec Write-upsby0day stories·Jan 15, 2025Critical Blind SQL Injection leads to $4,134 (7/30 DAYS)Understanding the Risk: How a Blind SQL Injection Was Discovered in inDrive.A response icon1A response icon1
PinnedInOSINT Teamby0day stories·Jan 8, 2025Exposing HTML Injection:$500 Bounty (6/30DAYS)How a Researcher Earned $500 for Uncovering a Dangerous HTML Injection Flaw !!!
Pinned0day stories·Jan 1, 2025This Simple GraphQL SSRF Bug Earned $3,000 (3/30 DAYS)I’m a security researcher, and I’ve taken on the challenge of explaining one bug bounty report every day for the next 30 days — 30 days…A response icon8A response icon8
Pinned0day stories·Dec 28, 2024IDOR Flaw Leads to $1160 Bounty (1/30 DAYS)I’m a security researcher taking on the challenge of explaining one bug bounty report every day for 30 days. Here’s the first one…
InOSINT Teamby0day stories·Feb 24, 2025Unpatched RCE in Laravel Voyager = Big Bounties! 💰Critical RCE vulnerability in Laravel’s popular admin panel
0day stories·Feb 19, 2025Bug Bounty Methodology: Exploiting Dev & Staging Environments for Maximum BountyWhy Dev & Staging Environments Are a Goldmine for Bug Hunters Seeking High-Value Exploits
InOSINT Teamby0day stories·Jan 31, 2025Admin Panel Exploit Leaks 1 Million User Records on LogitechHow an unexpected misconfiguration in an admin panel led to the exposure of 1 million user recordsA response icon3A response icon3
0day stories·Jan 5, 2025Account Deletion Flaw Exposes Chats, Researcher Gets $1,000 (5/30DAYS)Uncovering the Chat Privacy Vulnerability and How It Was Fixed
