About The Author
-
Exploiting %0A Injection for XSS on Samsung
I began by searching for subdomains using Sublist3r and then checked the HTTP status codes for each subdomain…
-
POST-based XSS on DomaiNesia
DomaiNesia is a company that offers domain registration, web hosting, VPS, and other related services. In this report,…
-
Reflected XSS Hidden Input in AT&T
During my testing of AT&T’s common login page, I discovered a reflected XSS vulnerability in the transactionID parameter.…
-
Stored DOM-based XSS on Xiaomi
Yesterday, I discovered a Stored Cross-Site Scripting (XSS) vulnerability on the Xiaomi Forum via Markdown. Today, I’ve found…
-
WinRAR XSS
A few days ago, I discovered a Cross-site Scripting (XSS) vulnerability in WinRAR. In this article, I’ll walk…
-
Reflected DOM-based XSS on DomaiNesia
In this article, I’ll walk you through how I discovered a Reflected DOM-based Cross-site Scripting (XSS) vulnerability on…
-
Exploiting XSS via Markdown on Xiaomi
Markdown is a popular text-to-HTML conversion tool, commonly used in forums and web platforms to create web content.…
-
Reflected XSS on Microsoft
During my recent bug bounty hunting, I started by gathering information on the Microsoft domain using a simple…
-
$300 Bounty for Exploiting DOM-based XSS
While analyzing XING’s event management platform, I identified a reflected XSS vulnerability in the way event IDs are…
-
Reflected XSS on AT&T
While performing a Google Dork search for potential vulnerabilities, I used the following query to target AT&T’s website:…
Recent Posts
- Drupal CVE-2026-9082 Checker
We recently created a small Python tool to detect CVE-2026-9082,… Read more: Drupal CVE-2026-9082 Checker - We’re Hiring — Node.js Cybersecurity Expert
N45HT is currently looking for a talented and experienced Node.js… Read more: We’re Hiring — Node.js Cybersecurity Expert - Exposed Production Database Found on Sitemile.com
While browsing for WordPress themes, I came across sitemile.com. After… Read more: Exposed Production Database Found on Sitemile.com - YesWeHack Dojo – RubitMQ
Initial Ruby Application Code: The application processes user-supplied data by… Read more: YesWeHack Dojo – RubitMQ - Hacking AI with Markdown: How We Triggered XSS in DeepSeek’s Chat
AI-generated chat messages are becoming a cornerstone of modern digital… Read more: Hacking AI with Markdown: How We Triggered XSS in DeepSeek’s Chat
Social Media
Advertisement
Tags
API Bug Bounty Capture The Flag Command Injection Cross-site Scripting CTF CVE-2026-9082 Drupal ExifTool HTML Information Disclosure JavaScript Markdown Open Redirection PHP SQL Injection VDP WAF Web Application Firewall XSS XSSR XSSRush