Скачать или смотреть Improper Input Validation on RealSelf | Bug POC | BugCrowd

The type of the bug is Improper Input Validation, Present into the "Update Profile" and "Favorite" section.

1) A user can put any length of the data and misleading information into the input field while update the account. like name,age,etc...

2) I am able to inject the new parameter while creating the "favorite folder" that will reflect in the browser.

Steps To Reproduce:
This issue can be reproduced by following these easy steps:

Setup burpsuite proxy with web browser.
Visit to the profile.
Turn on the burp suite interceptor and modify the details.
POC ATTACHED.

I'm Umair Farooqui, a passionate software engineer and security researcher dedicated to uncovering vulnerabilities in systems worldwide. With a strong background in ethical hacking, I delve into the intricacies of cybersecurity to safeguard digital infrastructures.

🔍 Hacking Experience:

I specialize in discovering and responsibly disclosing critical security issues. My portfolio includes successful hacks and disclosures impacting renowned organizations such as NASA and Paytm, earning recognition and appreciation for enhancing their security postures.

🎥 YouTube Channel:

On my YouTube channel, I share Proof of Concept (PoC) videos where I demonstrate how vulnerabilities were identified and exploited. Each video provides insights into the techniques used and the impact on security.

🌐 Connect with Me:
GitHub: https://github.com/mufazmi
Instagram:   / mufazmi  
Twitter:   / mufazmi  
HackerOne: https://hackerone.com/mufazmi
Bugcrowd: https://bugcrowd.com/mufazmi
Google Search: https://www.google.com/search?q=Umair...
Google Search: https://www.google.com/search?q=mufazmi

📱 Contact Me:
WhatsApp: +91 9867503256

Note: All content shared on this channel is for educational purposes only.

🔗 Hashtags:
#mufazmi #umairfarooqui #ethicalhacking #cybersecurity #infosec #bugbounty #securityresearch #hacker #bughunter #websecurity #pentesting #vulnerability #exploit #securityawareness #tech #coding #opensource #privacy #datasecurity #cybercrime #networksecurity #cyberattack #digitalforensics #blockchainsecurity #iotsecurity #appsec #cloudsecurity #redteam #blueteam #hackerinmumbra #mumbra #mumbrahacker #hackerkausa #mumbrahacker #itpm #hackerinsaraimeer #saraimeerhacker #saraimeer

Join me in exploring the world of cybersecurity, one vulnerability at a time! Let's secure the digital landscape together. 💻🛡️