Zoomph Full Account Takeover Via Clickjacking

How to detect the site for CRLF Injection

Open Redirection Protection Bypass DOD Domain

Self XSS Exploitation DOD Domain

Zoomph Full Account Takeover Via Clickjacking

Achmea Full Account takeover via CSRF

Kissflow Stored XSS

IDOR To Delete Reports - Razer

Grabtaxi Self XSS Exploitation With Clickjacking

Forgerock CSRF Token's Bypass Due to Improper Sequence - (Misconfiguration)

Stored XSS In Microsoft By AhsanKhan

Airbnb Clickjacking Exploitation

hitbtc Stored XSS To Fully Account Takeover

hitbtc Reflected XSS And Other

Open Redirection to Account Takeover

Stored XSS Exploitation With Beef -- Private Programe

Amount Manipulation Docker

Amout Parameter Vulr To Buy Free ActiVPN

Authentication Bypassed Odoo

Logic Flaw To Email Verification Bypassed Odoo

Logic Flaw Leads To Authentication Bypass Odoo

Stored XSS In Opera Server Side

Reflected XSS BY Using HTTP Parameter Pollution

Logic Flaw To Authentication Bypass

Referer Based XSS Learning