Web 12

• Moderation Filter Bypass in support.mozilla.org 2022-06-26
• Changedetection CSRF to Local File Disclosure 2022-04-20
• Unauthenticated Stored XSS on Django-Markdownx 2022-03-02
• Bookwyrm Server Side Request Forgery 2022-02-14
• Hacking into school management systems. Reflected XSS To RCE 2022-02-08
• How To Get Started Hacking Django Based Applications 2022-01-30
• 2FA bypass by reading the documentation 2022-01-09
• Support Board 3.3.4 Arbitrary File Deletion to Remote Code Execution 2021-10-18
• How to get started Hacking Wordpress Plugins 2021-09-28
• SQL injection in harvard subdomain 2021-09-02
• Lit CTF — Alex Fan Club : Sql injection with strict blacklist 2021-07-19
• Broken Access control bug : Bypassing 403’s by finding another endpoint that do the same thing. 2021-07-13