The Little CV + CSRF That Broke an Account

السَّلاَمُ عَلَيْكُمْ وَرَحْمَةُ اللهِ وَبَرَكَاتُهُ. اللَّهُمَّ صَلِّ عَلَى مُحَمَّدٍ وَعَلَى آلِ مُحَمَّدٍ، كَمَا صَلَّيْتَ عَلَى…Continue reading on Medium »
Read more...

Linux File Permissions Exploits Every Hacker Should Know

Understanding Linux file permissions is critical for both system administrators and penetration testers. When misconfigured, file…Continue reading on Medium »
Read more...

HOW i found the CVE-2025–4388?

Hi, everyone,Continue reading on Medium »
Read more...

The Psychology of a Hacker’s Click — Why Bug Bounty is More Mindset Than Tools

🧠 IntroductionContinue reading on Medium »
Read more...

The Ghost Vulnerabilities — How “Fixed Bugs” Come Back From the Dead

👻 IntroductionContinue reading on Medium »
Read more...

Not All Vulnerabilities Require Highly Technical Exploits | Security Misconfiguration

A Story of Security MisconfigurationContinue reading on Medium »
Read more...

Critical but very easy Unauthorized Data Disclosure via HTTP Method Manipulation: A Lesson in API…
https://medium.com/@InsbatArshad/critical-unauthorized-data-disclosure-via-http-method-manipulation-a-lesson-in-api-security-in-5d55c1ffd961?source=rss------bug_bounty-5

Assalam o alaikum for muslim brothers, sisters and hello for non muslims. i hope all of you are doing well and learning new things day by…Continue reading on Medium » (https://medium.com/@InsbatArshad/critical-unauthorized-data-disclosure-via-http-method-manipulation-a-lesson-in-api-security-in-5d55c1ffd961?source=rss------bug_bounty-5)

Understanding the OWASP Top 10: The Simplest Guide for Web Security
https://medium.com/@cybersenpai/understanding-the-owasp-top-10-the-simplest-guide-for-web-security-8986530582d6?source=rss------bug_bounty-5

The OWASP Top 10 is a globally recognized list of the most critical web application security risks, published by the Open Web Application…Continue reading on Medium » (https://medium.com/@cybersenpai/understanding-the-owasp-top-10-the-simplest-guide-for-web-security-8986530582d6?source=rss------bug_bounty-5)

Recon to Responsible Disclosure
https://saurabh-jain.medium.com/recon-to-responsible-disclosure-ee3d308a3b69?source=rss------bug_bounty-5

My First Accepted Bug!Continue reading on Medium » (https://saurabh-jain.medium.com/recon-to-responsible-disclosure-ee3d308a3b69?source=rss------bug_bounty-5)

Cloudflare Tunnel — Origin Exposure Weaponized
https://p4n7h3rx.medium.com/cloudflare-tunnel-origin-exposure-weaponized-6ae5b1f09bb2?source=rss------bug_bounty-5

🔎 IntroductionContinue reading on Medium » (https://p4n7h3rx.medium.com/cloudflare-tunnel-origin-exposure-weaponized-6ae5b1f09bb2?source=rss------bug_bounty-5)

The Little CV + CSRF That Broke an Account
https://0onoproblem.medium.com/the-little-cv-csrf-that-broke-an-account-3c0abbc08597?source=rss------bug_bounty-5

السَّلاَمُ عَلَيْكُمْ وَرَحْمَةُ اللهِ وَبَرَكَاتُهُ. اللَّهُمَّ صَلِّ عَلَى مُحَمَّدٍ وَعَلَى آلِ مُحَمَّدٍ، كَمَا صَلَّيْتَ عَلَى…Continue reading on Medium » (https://0onoproblem.medium.com/the-little-cv-csrf-that-broke-an-account-3c0abbc08597?source=rss------bug_bounty-5)

How I Discovered CVE-2025–0133 – Reflected XSS with Shodan Recon

Hello Hackers,Continue reading on Medium »
Read more...

Bug Bounty Time Travel — Hacking the Past to Predict the Future

⏳ IntroductionContinue reading on Medium »
Read more...