⤷ Title: From Unrestricted File Upload to Remote Code Execution: A Responsible Disclosure Case Study
════════════════════════
𐀪 Author: PaulHaykeens
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 20:46:44 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #ethical_hacking #bugbounty_writeup #security #bug_bounty
════════════════════════
𐀪 Author: PaulHaykeens
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 20:46:44 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #ethical_hacking #bugbounty_writeup #security #bug_bounty
Medium
From Unrestricted File Upload to Remote Code Execution: A Responsible Disclosure Case Study
How an unauthenticated ASP.NET upload endpoint exposed a direct path to server-side code execution — and why minimal-impact validation…
⤷ Title: I Found a LiteLLM API Key in a Publicly Accessible .env File on a NASA Subdomain
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:39:08 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #cybersecurity #hacking #artificial_intelligence #web_security
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:39:08 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #cybersecurity #hacking #artificial_intelligence #web_security
Medium
I Found a LiteLLM API Key in a Publicly Accessible .env File on a NASA Subdomain
Sometimes you don’t need a complicated exploit to find something interesting.
⤷ Title: Fitness Apps & The Hidden Security Risks
════════════════════════
𐀪 Author: Vivek Maurya
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 13:16:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #fitness #bugbounty_writeup #running
════════════════════════
𐀪 Author: Vivek Maurya
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 13:16:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #fitness #bugbounty_writeup #running
Medium
Fitness Apps & The Hidden Security Risks
Real-world bug bounty findings on how fitness apps can be turned into spyware
⤷ Title: How I Made €200 Bypassing Cross-Portal Access Control
════════════════════════
𐀪 Author: Utaa
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 14:19:33 GMT
════════════════════════
⌗ Tags: #pentesting #bug_hunting #cybersecurity #bugbounty_writeup
════════════════════════
𐀪 Author: Utaa
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 14:19:33 GMT
════════════════════════
⌗ Tags: #pentesting #bug_hunting #cybersecurity #bugbounty_writeup
Medium
How I Made €200 Bypassing Cross-Portal Access Control
Hey everyone! In this writeup, I’m excited to share my experience finding a Broken Access Control / Cross-Portal Authorization Bypass…
⤷ Title: How I Bypassed an OTP Verification Limit by Chaining Multiple Logic Flaws
════════════════════════
𐀪 Author: Hossam Hamada
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 17:06:32 GMT
════════════════════════
⌗ Tags: #bugcrowd #writing_tips #bugbounty_writeup #hackerone #bugbounty_poc
════════════════════════
𐀪 Author: Hossam Hamada
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 17:06:32 GMT
════════════════════════
⌗ Tags: #bugcrowd #writing_tips #bugbounty_writeup #hackerone #bugbounty_poc
Medium
How I Bypassed an OTP Verification Limit by Chaining Multiple Logic Flaws
I’m Hossam Hamada, a security researcher and bug bounty hunter. During an authorized security assessment, I discovered an interesting OTP…
⤷ Title: When API Trust Goes Wrong: Findings From an E-Commerce Security Assessment
════════════════════════
𐀪 Author: Kittubadri
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 18:34:14 GMT
════════════════════════
⌗ Tags: #cybersecuri #bugbounty_writeup
════════════════════════
𐀪 Author: Kittubadri
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 18:34:14 GMT
════════════════════════
⌗ Tags: #cybersecuri #bugbounty_writeup
Medium
When API Trust Goes Wrong: Findings From an E-Commerce Security Assessment
Security testing doesn’t always require complex exploits.
⤷ Title: 100 Days of Bug Bounty — Day 9
════════════════════════
𐀪 Author: Zubair Ahmed
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 05:59:33 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #ethical_hacking #bugbounty_writeup #bug_bounty
════════════════════════
𐀪 Author: Zubair Ahmed
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 05:59:33 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #ethical_hacking #bugbounty_writeup #bug_bounty
Medium
100 Days of Bug Bounty — Day 9 🐞
Short one today.
⤷ Title: Knowing the Name of the Thing Isn’t the Same as Knowing How to Investigate the Thing
════════════════════════
𐀪 Author: Rubab Fatima
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 13:27:19 GMT
════════════════════════
⌗ Tags: #ai #ai_security #application_security #cybersecurity #bugbounty_writeup
════════════════════════
𐀪 Author: Rubab Fatima
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 13:27:19 GMT
════════════════════════
⌗ Tags: #ai #ai_security #application_security #cybersecurity #bugbounty_writeup
Medium
Knowing the Name of the Thing Isn’t the Same as Knowing How to Investigate the Thing
An AI Restriction Bypass
⤷ Title: Unauthenticated XXE leading to SSRF and internal resource access
════════════════════════
𐀪 Author: Moaaz Afifi
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 13:59:43 GMT
════════════════════════
⌗ Tags: #xxe_attack #bugbounty_writeup #ssrf #penetration_testing #cybersecurity
════════════════════════
𐀪 Author: Moaaz Afifi
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 13:59:43 GMT
════════════════════════
⌗ Tags: #xxe_attack #bugbounty_writeup #ssrf #penetration_testing #cybersecurity
Medium
Unauthenticated XXE leading to SSRF and internal resource access
During my BBH, i was looking at a subdomain that returned 403 on everything.
⤷ Title: 100 Days of Bug Bounty — Day 10
════════════════════════
𐀪 Author: Zubair Ahmed
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 07:16:51 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_hunter #bugbounty_writeup #bug_bounty_tips #bug_bounty_writeup
════════════════════════
𐀪 Author: Zubair Ahmed
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 07:16:51 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_hunter #bugbounty_writeup #bug_bounty_tips #bug_bounty_writeup
Medium
100 Days of Bug Bounty — Day 10 🐞
Close call today.