Security Vux

!

[P1] Business Logic - Subscription Purchased in Just 10rs (POC)
[P1] Business Logic - Subscription Purchased in Just 10rs (POC)
XSS BUG REPORT 🐞| HALL OF FAME | Techieey
XSS BUG REPORT 🐞| HALL OF FAME | Techieey
Insufficient workflow validation
Insufficient workflow validation
Flawed enforcement of business rules
Flawed enforcement of business rules
Inconsistent security controls
Inconsistent security controls
High level logic vulnerability
High level logic vulnerability
Excessive trust in client side controls
Excessive trust in client side controls
Authentication bypass via information disclosure
Authentication bypass via information disclosure
Source code disclosure via backup files
Source code disclosure via backup files
Information disclosure on debug page
Information disclosure on debug page
Information disclosure in error messages
Information disclosure in error messages
Developing a custom gadget chain for PHP deserialization
Developing a custom gadget chain for PHP deserialization
Arbitrary object injection in PHP
Arbitrary object injection in PHP
Modifying serialized data types
Modifying serialized data types
Modifying serialized objects
Modifying serialized objects
Web cache poisoning via a fat GET request
Web cache poisoning via a fat GET request
Parameter cloaking
Parameter cloaking
Web cache poisoning via an unkeyed query string
Web cache poisoning via an unkeyed query string
Web cache poisoning with multiple headers
Web cache poisoning with multiple headers
Web cache poisoning with an unkeyed cookie
Web cache poisoning with an unkeyed cookie
Web cache poisoning with an unkeyed header
Web cache poisoning with an unkeyed header
Username enumeration via subtly different responses
Username enumeration via subtly different responses
Password reset broken logic
Password reset broken logic
2FA simple bypass
2FA simple bypass
Username enumeration via different responses
Username enumeration via different responses
Referer based access control
Referer based access control
Multi step process with no access control on one step
Multi step process with no access control on one step
Method based access control can be circumvented
Method based access control can be circumvented
URL based access control can be circumvented
URL based access control can be circumvented
Insecure direct object references
Insecure direct object references