About The Author
-
Exploiting XSS via Markdown on Xiaomi
Markdown is a popular text-to-HTML conversion tool, commonly used in forums and web platforms to create web content.…
-
Reflected XSS on Microsoft
During my recent bug bounty hunting, I started by gathering information on the Microsoft domain using a simple…
-
$300 Bounty for Exploiting DOM-based XSS
While analyzing XING’s event management platform, I identified a reflected XSS vulnerability in the way event IDs are…
-
Reflected XSS on AT&T
While performing a Google Dork search for potential vulnerabilities, I used the following query to target AT&T’s website:…
-
Bug Hunting on KASKUS
This time, I’d like to share my bug-hunting experience on the KASKUS website. I’ve discovered several bugs, including…
Recent Posts
- PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution (CVE-2026-109618 and CVE-2026-109619)
PHP2Shell is a set of critical vulnerabilities in the PHP… Read more: PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution (CVE-2026-109618 and CVE-2026-109619) - The CSS Backdoor Nobody Talks About
Webmail clients like Gmail, Outlook, and Fastmail sanitize untrusted HTML/CSS… Read more: The CSS Backdoor Nobody Talks About - Critical Analysis of CVE-2026-50522: Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft SharePoint is one of the most widely used enterprise… Read more: Critical Analysis of CVE-2026-50522: Microsoft SharePoint Remote Code Execution Vulnerability - We’re Hiring: Python Cybersecurity Expert
Hiring Status: Closed Applications for this position are no longer… Read more: We’re Hiring: Python Cybersecurity Expert - XSSR Pro is Now Available for Free
We’re excited to announce that XSSR Pro is now available… Read more: XSSR Pro is Now Available for Free
Social Media
Advertisement
Tags
API Bug Bounty Capture The Flag Command Injection Cross-site Scripting CSS CTF CVE-2026-9082 CVE-2026-50522 CVE-2026-109618 CVE-2026-109619 Drupal ExifTool HTML Information Disclosure JavaScript Markdown Microsoft SharePoint Open Redirection PHP php2shell SQL Injection VDP WAF Web Application Firewall XSS XSSR XSSRush