Write-ups

Check The Published Writeups

Reset
WDBTitleTagsProgramsAuthorsTypePublicationAdded
5103Lightweight markup: a trio of persistent XSS in GitLab Stored XSS GitLab Yasin Soliman (@SecurityYasin) Bug Bounty2017-02-152023-06-13
5101From RSS to XXE: feed parsing on Hootsuite XSS XXE Hootsuite Yasin Soliman (@SecurityYasin) Bug Bounty2017-02-172023-06-13
5074A pair of Plotly bugs: Stored XSS and AWS Metadata SSRF Stored XSS SSRF Plotly Yasin Soliman (@SecurityYasin) Bug Bounty2017-05-252023-06-13
5050Road to (unauthenticated) recovery: downloading GitHub SSO bypass codes Authorization flaw GitHub Yasin Soliman (@SecurityYasin) Bug Bounty2017-06-252023-06-13
5042Managed Apps and Music: a tale of two XSSes in Google Play XSS Google Yasin Soliman (@SecurityYasin) Bug Bounty2017-07-072023-06-13
4949App Maker and Colaboratory: a stored Google XSS double-bill Stored XSS Google Yasin Soliman (@SecurityYasin) Bug Bounty2017-11-012023-06-13
4926Taking note: XSS to RCE in the Simplenote Electron client XSS RCE Automattic Yasin Soliman (@SecurityYasin) Bug Bounty2017-11-222023-06-13