From the field notes

Chaining Stored XSS and CSRF to Account Takeover

While hunting on lexzur.com, I found a stored XSS in a document description field. On its own, that's a decent find. But when I noticed the same endpoint had no…

$1000 Bounty for an IDOR Leaking Team Members Data

While testing redacted.com's GraphQL API, I came across a query used to fetch team membership details names, roles, and emails of everyone on a team. Nothing …