Demo: exfiltrating partial info of a dynamic JS with XHR
Anker Soundcore Rave: 160 WATT Party In A Box
Что нужно взять с собой в лагерь?/ Список вещей в лагерь/ by Катерина Блинова
Voice of the Soul (cover)
🗡Lords Mobile - Bloodlust - Stage 2 - Teats of Life - Auto
Countdown clock - 1 minute
Painting of special equipment
Action Balls - Levels 216-217 :)
How to Create AI Story Videos Free | How to make Ai video Free
Reflected XSS via REQUEST_URI & Internet Explorer
last pass XSS when sharing folder - Marked as [NOT APLICABLE] zero day
Osticket v1.9.14 and below (X-Forwarded-For) - Stored XSS (PoC)
Moodle 3.1.2 - Installation process SQLi
Wordpress Ultimate Product Catalog v3.8.6 - Arbitrary file upload (RCE)
Wordpress Ultimate Product Catalog v3.8.1 and below - Privilege escalation [IDOR]
CP polls executable download (PoC)
Cp calculated fields form - Http only bypass & session hijacking (PoC)
Telmex Hub - CSRF && XSS - Session hijacking vulnerability (Fixed)
Telmex Hub SQL injection vulnerability
dwbooster.com (codepeople plugins & extensions) 2015 SQLi vulnerability
HUGE IT SLIDER 2.7.5 CSRF & Persistent JS HTML code injection, Arbitrary slider deletion (PoC)