About The Author
-
WinRAR XSS
A few days ago, I discovered a Cross-site Scripting (XSS) vulnerability in WinRAR. In this article, I’ll walk…
-
Reflected DOM-based XSS on DomaiNesia
In this article, I’ll walk you through how I discovered a Reflected DOM-based Cross-site Scripting (XSS) vulnerability on…
-
Exploiting XSS via Markdown on Xiaomi
Markdown is a popular text-to-HTML conversion tool, commonly used in forums and web platforms to create web content.…
-
Reflected XSS on Microsoft
During my recent bug bounty hunting, I started by gathering information on the Microsoft domain using a simple…
-
Reflected XSS on AT&T
While performing a Google Dork search for potential vulnerabilities, I used the following query to target AT&T’s website:…
-
Bug Hunting on KASKUS
This time, I’d like to share my bug-hunting experience on the KASKUS website. I’ve discovered several bugs, including…
Recent Posts
- The CSS Backdoor Nobody Talks About
Webmail clients like Gmail, Outlook, and Fastmail sanitize untrusted HTML/CSS… Read more: The CSS Backdoor Nobody Talks About - Critical Analysis of CVE-2026-50522: Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft SharePoint is one of the most widely used enterprise… Read more: Critical Analysis of CVE-2026-50522: Microsoft SharePoint Remote Code Execution Vulnerability - We’re Hiring: Python Cybersecurity Expert
Hiring Status: Closed Applications for this position are no longer… Read more: We’re Hiring: Python Cybersecurity Expert - XSSR Pro is Now Available for Free
We’re excited to announce that XSSR Pro is now available… Read more: XSSR Pro is Now Available for Free - Drupal CVE-2026-9082 Checker
We recently created a small Python tool to detect CVE-2026-9082,… Read more: Drupal CVE-2026-9082 Checker
Social Media
Advertisement
Tags
API Bug Bounty Capture The Flag Command Injection Cross-site Scripting CSS CTF CVE-2026-9082 CVE-2026-50522 Drupal ExifTool HTML Information Disclosure JavaScript Markdown Microsoft SharePoint Open Redirection PHP SQL Injection VDP WAF Web Application Firewall XSS XSSR XSSRush