Hi guys, after almost a year, I thought I should create a new write-up. Today, I’m gonna show you the email verification bypass vulnerability that I found at high-profile tech & software company. So I’ll call that company as “redacted” and let’s get started! Basically, when you sign up with…

Hi guys, I have been gone for a while but now I’m back and here is a new write-up post. Today, I’m gonna show you the Open Redirection vulnerability I found at Apple’s subdomain using the dot character. I don’t have a permission to publish this subdomain so I won’t…

Hello everyone. Today I’m going to talk about five different vulnerabilities that I found on a single page. Three of these vulnerabilities were accepted and other two were closed as duplicate. Also the company was rewarded me with €1500. As always, I can’t give information about the company because they…

Hello everyone. Today, I’m going to talk about two minor vulnerabilities based on insecure parameters that I discovered in the same program. This will be a short story and I will call it as “redacted.com” cause the company runs a private program. So, let’s get started. I. Bypassing mail verification…

Hi, today I‘m going to talk about three basic vulnerabilities that I discovered in the same program and were rewarded with 1500€. Since all three approaches are similar, it would be pretty easy to connect the vulnerabilities together. Let’s call them redacted because the company runs a private bug bounty…

Hi folks! In this write-up, I’m going to talk about the vulnerability I found to broaden your perspective on IDORs. As always, I can’t give information about the company because they run a private bug bounty program. So, let’s call them as “redacted”. Also this will be a short write-up, but…

Hello everyone! Today we’re going to talk about the vulnerability I found a few months ago. The vulnerability targeted customers and suppliers directly in the company, also was a subdomain of a large skincare company. (This report has been resolved but I can’t provide information about the company because it…

In this article, I’ll talk about a security vulnerability (CVE-2021–41277), which has been popular in the InfoSec committee recently. I’ll also talk about a popular security vulnerability database, the WhiteSource Vulnerability Database. So let’s get started! Last month, a post on Twitter caught my attention. It contained a 14K list…

Hello everyone. It’s been a long time. Hope everyone is well. I thought, I should publish a new write-up and I feel ready for it. Today I’m going to talk about a series of vulnerabilities that I found in Sony a few months ago. OK, Let’s go then! As you…