5252 | Tesla Motors blind SQL injection |
SQL injection |
Tesla |
Bitquark (@bitquark) |
Bug Bounty | 2014-02-23 | 2023-06-13 |
5214 | Blind SQL Inejction [Hootsuite] |
Blind SQL injection |
Hootsuite |
Abdullah Hussam (@Abdulahhusam) |
Bug Bounty | 2015-08-01 | 2023-06-13 |
5095 | Time-based Blind SQLi on news.starbucks.com |
Blind SQL injection |
Starbucks |
toctou |
Bug Bounty | 2017-02-26 | 2023-06-13 |
4808 | Please email me your password |
Blind XSS
Blind SQL injection
SMTP injection
Account takeover |
NA |
Jasmin Laundry (@JR0ch17) |
Bug Bounty | 2018-04-11 | 2023-06-13 |
4671 | Making a Blind SQL Injection a Little Less Blind |
SQL injection |
NA |
TomNomNom (@tomnomnom) |
Bug Bounty | 2018-07-28 | 2023-06-13 |
4025 | Exploiting a Tricky Blind SQL Injection inside LIMIT clause |
SQL injection |
NA |
Rahul Maini (@iamnoooob) |
Bug Bounty | 2019-07-21 | 2023-06-13 |
3955 | Bug Bounty: Bypassing a crappy WAF to exploit a blind SQL injection |
Blind SQL injection |
NA |
Robin Verton (@robinverton) |
Bug Bounty | 2019-08-25 | 2023-06-13 |
3406 | Utilizing Lockdown: Blind Sqli leads to Account Takeover & Data Extraction |
Blind SQL injection
Account takeover |
NA |
Shakti Mohanty (@3ncryptSaan) |
Bug Bounty | 2020-06-10 | 2023-06-13 |
3243 | Blind SQL Injection at fasteditor.hema.com |
SQL injection |
Hema |
Jonathan Bouman (@JonathanBouman) |
Bug Bounty | 2020-08-06 | 2023-06-13 |
2960 | My Bug Bounty Journey and My First Critical Bug — Time Based Blind SQL Injection |
SQL injection |
NA |
Marx Chryz |
Bug Bounty | 2020-12-17 | 2023-06-13 |
2410 | How I found Blind SQL Injection just by browsing and getting a unique URL |
SQL injection |
NA |
Jawad Mahdi (@hunter0x1) |
Bug Bounty | 2021-07-14 | 2023-06-13 |
2056 | Moodle Blind SQL injection via MNet authentication |
SQL injection |
Moodle |
rekter0 (@rekter0) |
Bug Bounty | 2021-11-23 | 2023-06-13 |
1916 | Moodle: Blind SQL Injection (CVE-2021-36393) and Broken Access Control (CVE-2021-36397) |
SQL injection
Broken Access Control |
Moodle |
0xkasper (@0xkasper) |
Bug Bounty | 2022-01-15 | 2023-06-13 |
1721 | My First Blind SQL Injection |
SQL injection |
NA |
T VAMSHI |
Bug Bounty | 2022-03-17 | 2023-06-13 |
1328 | WordPress Transposh: Exploiting a Blind SQL Injection via XSS - RCE Security |
SQL injection
XSS
Account takeover |
WordPress |
Julien Ahrens (@MrTuxracer) |
Bug Bounty | 2022-07-22 | 2023-06-13 |
882 | Blind SQL Injection on Delete Request |
Blind SQL injection |
NA |
Jawad Mahdi (@hunter0x1) |
Bug Bounty | 2022-10-30 | 2023-06-13 |
661 | Multiple authenticated blind SQL Injections in Sage XRT Business Exchange application |
Blind SQL injection |
Sage |
Mickaël Benassouli (@mickaelweb) |
Bug Bounty | 2022-12-21 | 2023-06-13 |
323 | I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability. |
SQL injection
GraphQL |
NA |
nav1n (@nav1n0x) |
Bug Bounty | 2023-03-10 | 2023-06-13 |
51 | Utilizing Historical URLs of an Organization to successfully execute SQL queries — Blind SQLi |
Blind SQL injection |
NA |
Aayush Vishnoi (@AayushVishnoi10) |
Bug Bounty | 2023-05-26 | 2023-06-13 |