Published inInfoSec Write-ups[Bug Bounty] Email Content InjectionThis post is about a security bug i have found in a private program. As name suggest it is the injection of content including the link…Mar 12, 20201Mar 12, 20201
CSRF CSRF CSRF…This article is about few CSRFs i have found in private programs. Although all these CSRFs are of low impact but enough to get…Feb 3, 2020Feb 3, 2020
A $25 Easy Bug.This post is about a security bug i have found in one of the bug bounty program which was very easy to find and accepted by the company…Dec 12, 2019Dec 12, 2019
$150 XSS at Error Page of Respository CodeThis article is about a security bug/issue i have found at private program on Hackerone(H1).Dec 7, 2019Dec 7, 2019
CSV injection at Comment Section.This article is about a security bug/issue I found on a managed private program at H1(Hackerone).Jun 24, 2019Jun 24, 2019
A $75 Base64 encoded parameter.This article is about a parameter which was taking the values not as simple text or HTML code but as encoded base64 string/text. The…May 19, 2019May 19, 2019
A Not Applicable Bug.I believe it is good to read h1 disclosed reports for learning new things and to know what sort of impact they accept in a bug bounty…Apr 27, 20191Apr 27, 20191
![[Bug Bounty] Email Content Injection](https://miro.medium.com/v2/resize:fill:80:53/1*bQxGE5yD993_-7sL105y1A.jpeg)
![[Bug Bounty] Email Content Injection](https://miro.medium.com/v2/resize:fill:160:107/1*bQxGE5yD993_-7sL105y1A.jpeg)
