#writeup

Articles tagged with #writeup

The $1000 Ticket IDOR: One Number Exposed National IDs and Government Staff PII
Severity: HighBounty: ~$949Program: Private Bug BountyPlatform: Bugbounty.sa This finding started with a very simple endpoint: GET /api/tickets-management/portal/history-by-ticket/<ticket_id> The end
Aug 18, 202610 min read50
From Editor to Owner: One Writable Field Was Enough to Take Over an Organization
Severity: HighBounty: ~$315Platform: Standoff365 This one came down to a single field that should never have been writable by an editor: Firm[user_id] The application had a clear permission model. An
Aug 17, 202612 min read31
From Profile IDOR to Zero-Click Account Takeover: Changing One userid Parameter Was Enough
Severity: CriticalBounty: $1,805Program: Private Bug BountyPlatform: Bugbounty.sa This started as a straightforward profile IDOR. An authenticated user could change a userid parameter and load another
Jul 30, 202613 min read23
IDOR in Government Ownership API Exposed Private Business Owner PII via CR Number Enumeration
Severity: HighBounty Awarded: $1,506Program: Private Bug BountyPlatform: Bugbounty.sa Some IDORs are obvious immediately. You change an ID. Someone else’s data appears. Easy. Others look harmless at f
May 21, 20266 min read49
Zero-Click Stored XSS in Chat: When “Just Open the Window” Is Enough
Severity: HighBounty Awarded: $394Program: Private Bug BountyPlatform: Bugbounty.sa Most chat XSS bugs are noisy. You send a payload. The victim has to click something. Refresh the page. Open the mes
May 18, 20269 min read32