The Open Redirect That Could Turn a Trusted URL Into a Weapon — A Bug Hunting Story

Some vulnerabilities feel small at first glance — almost too simple to matter.Continue reading on Medium »
Read more...

What's a goldmine github project you found?
https://www.reddit.com/r/Pentesting/comments/1pqfq1x/whats_a_goldmine_github_project_you_found/

submitted by /u/Minge_Ninja420 (https://www.reddit.com/user/Minge_Ninja420)
[link] (https://www.reddit.com/r/Pentesting/comments/1pqfq1x/whats_a_goldmine_github_project_you_found/) [comments] (https://www.reddit.com/r/Pentesting/comments/1pqfq1x/whats_a_goldmine_github_project_you_found/)

CVE-2025–20393 (Cisco AsyncOS Zero-Day)

Origination:- Cyber LeelawatContinue reading on Medium »
Read more...

How I Found a $8,560 Password Reset Bug

How a Hidden API Endpoint Allowed an $8,560 Authentication Bypass and Full Account Takeover (A Bug Bounty Case Study)Continue reading on Medium »
Read more...

The phpinfo() Page That Shouldn’t Have Been There — And How It Exposed NykaaMan’s Internal…
https://medium.com/@anshubind89/the-phpinfo-page-that-shouldnt-have-been-there-and-how-it-exposed-nykaaman-s-internal-ee5f6e568159?source=rss------bug_bounty-5

There’s a specific kind of vulnerability that feels almost nostalgic.
 Something from the early days of PHP.
 Something every pentester…Continue reading on Medium » (https://medium.com/@anshubind89/the-phpinfo-page-that-shouldnt-have-been-there-and-how-it-exposed-nykaaman-s-internal-ee5f6e568159?source=rss------bug_bounty-5)

The Open Redirect That Could Turn a Trusted URL Into a Weapon — A Bug Hunting Story
https://medium.com/@anshubind89/the-open-redirect-that-could-turn-a-trusted-url-into-a-weapon-a-bug-hunting-story-c01e47e5ab3a?source=rss------bug_bounty-5

Some vulnerabilities feel small at first glance — almost too simple to matter.Continue reading on Medium » (https://medium.com/@anshubind89/the-open-redirect-that-could-turn-a-trusted-url-into-a-weapon-a-bug-hunting-story-c01e47e5ab3a?source=rss------bug_bounty-5)

CVE-2025–20393 (Cisco AsyncOS Zero-Day)
https://cyberleelawat.medium.com/cve-2025-20393-cisco-asyncos-zero-day-72b35798cdf9?source=rss------bug_bounty-5

Origination:- Cyber LeelawatContinue reading on Medium » (https://cyberleelawat.medium.com/cve-2025-20393-cisco-asyncos-zero-day-72b35798cdf9?source=rss------bug_bounty-5)

How I Found a $8,560 Password Reset Bug
https://medium.com/@codii/how-i-found-a-8-560-password-reset-bug-23a5845421c9?source=rss------bug_bounty-5

How a Hidden API Endpoint Allowed an $8,560 Authentication Bypass and Full Account Takeover (A Bug Bounty Case Study)Continue reading on Medium » (https://medium.com/@codii/how-i-found-a-8-560-password-reset-bug-23a5845421c9?source=rss------bug_bounty-5)

How i Found Easy ₹5,000 IDOR | Bug Bounty Writeup | P3

IntroductionContinue reading on Medium »
Read more...

How i Found Easy ₹5,000 IDOR | Bug Bounty Writeup | P3
https://medium.com/@rajankumarbarik143/how-i-found-easy-5-000-idor-bug-bounty-writeup-p3-27348656c4cd?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://medium.com/@rajankumarbarik143/how-i-found-easy-5-000-idor-bug-bounty-writeup-p3-27348656c4cd?source=rss------bug_bounty-5)

Outlawed / Banned from the Fraudulent Bug Bounty World: The Story of Cyber Kalki

Continue reading on Medium »
Read more...

# The Quiet Bugs That Don’t Look Like Bugs

# Lessons from 3–4 Years in CybersecurityContinue reading on Medium »
Read more...

Recon Fatigue Is Real — Until This One URL Paid My Rent

Hey there!😁Continue reading on InfoSec Write-ups »
Read more...

CVE-2025–67418: When Default Credentials Become a Remote Root Button

How Improper Access Control in ClipBucket Led to Full Administrative CompromiseContinue reading on Medium »
Read more...

Information disclosure, but not in the way you might expect

“This write-up highlights the importance of not overlooking any response and how it can sometimes earn you a bounty.”Continue reading on Medium »
Read more...