Write-ups

Check The Published Writeups

Reset
WDBTitleTagsProgramsAuthorsTypePublicationAdded
5040Coinbase AngularJS DOM XSS via Kiteworks DOM XSS Coinbase Paulos Yibelo (@PaulosYibelo) Bug Bounty2017-07-082023-06-13
2670This Man Thought Opening A TXT File Is Fine, He Thought Wrong. MacOS CVE-2019-8761 MacOS HTML injection Apple Paulos Yibelo (@PaulosYibelo) Bug Bounty2021-04-022023-06-13
1788CVE-2021-45467: CWP CentOS Web Panel – preauth RCE RCE LFI Arbitrary file write Centos Web Panel (CWP) Paulos Yibelo (@PaulosYibelo) Bug Bounty2022-01-222023-06-13
1770CVE-2022-24948: Apache JSPWiki preauth Stored XSS to ATO Stored XSS Account takeover Apache Paulos Yibelo (@PaulosYibelo) Bug Bounty2022-03-022023-06-13
1509Bypass CSP Using WordPress By Abusing Same Origin Method Execution CSP bypass Same Origin Method Execution WordPress Paulos Yibelo (@PaulosYibelo) Bug Bounty2022-05-292023-06-13
890CVE-2022-22241: Juniper SSLVPN / JunOS RCE and Multiple Vulnerabilities RCE Phar deserialization Reflected XSS XPATH injection Path traversal LFI Juniper Paulos Yibelo (@PaulosYibelo) Bug Bounty2022-10-282023-06-13