Allows users who are not members of a group to add any group to their favorites on their Facebook profile.

https://gitlab.com/gitlab-org/gitlab/-/work_items/551267

These Low-Hanging Fruits Made Me $120+ in 30 Minutes — Bugs That 80% of Hunters Ignore Hi everyone , bhavish here When people think about bug bounty, they imagine critical RCEs, SQL injections, and …

A bug bounty story about OAuth, PKCE, open client registration, and how multiple low-level issues chained together into a critical account…

No complex setups. No secret tools. Just you and your browser.

Hello Raccoonians,

Hello Everyone,

“سُبْحَانَكَ لا عِلْمَ لَنَا إِلَّا مَا عَلَّمْتَنَا إِنَّكَ أَنْتَ الْعَلِيمُ الْحَكِيمُ”

Platform: BugForge
Category: Broken Access Control / Mass Assignment

Here’s what I was doing wrong and how I fixed it.

30 Years in Bug Hunting and I’ve Had Enough of the Scams 😤🔥

It’s not skill. It’s not luck. Here’s the actual difference.

“No methodology. No fancy tools. Just a meme, a hunch, and a chatbot that really should have stayed in its lane.”

How a lazy Sunday shopping session turned into finding two critical vulnerabilities in a checkout SDK used by 400+ merchants

In a recent pentest project I tackled with my friend Sajad, we found a perfect example of how small cracks can break a whole system. By…

Hello raccoonians,

Hey Guys and Welcome Back 👋

ReversingLabs reveals how hackers exploit social media engagement metrics to deliver Vidar infostealer malware to thousands of unsuspecting users.

Ghost Sender: Why Your Email Gateway Isn’t Protecting Exchange Online Let’s be real: when I first heard about Ghost Sender, I thought, “There’s no way this works. SPF, DKIM, and DMARC would …

The honest diary of a beginner, week by week.