🐞 OS Command Injection at https://sea-web.gold.razer.com/lab/ws-lookup via IP parameter #821962 No longer public Razer Command and Code Injection – – $2,000 676 [phpobject in cookie] Remote shell/command execution #141956 No longer public Pornhub Command and Code Injection – – $20,000 607 SQL injection at https://sea-web.gold.razer.com/ajax-get-status.php via txid parameter #819738 No longer public Razer SQL Injection – – $2,000 580 SQL Injection in https://api-my.pay.razer.com/inviteFriend/getInviteHistoryLog #811111 No longer public Razer SQL Injection – – $2,000 528 Password theft login.newrelic.com via Request Smuggling #498052 No longer public New Relic Injection and Smuggling – – $3,000 490 Blind SQL Injection #758654 No longer public InnoGames SQL Injection – – $2,000 432 Server Side Request Forgery (SSRF) at app.hellosign.com leads to AWS private keys disclosure #923132 No longer public Dropbox Server-Side Request Forgery – – $4,913 360 Web cache poisoning attack leads to user information and more #492841 No longer public Postmates Misconfiguration and Insecure Design – – $500 343 OTP token bypass in accessing user settings #699082 No longer public Razer Authentication – – $1,000 339 HTML-injection in PDF-export leads to LFI #809819 No longer public Visma Public No weakness recorded – – $500 330 [Razer Pay Mobile App] Broken access control allowing other user's bank account to be deleted #757095 No longer public Razer Access Control – – $1,000 311 Full Response SSRF via Google Drive #1406938 No longer public Dropbox Server-Side Request Forgery – – $17,576 302 Reflected XSS at https://pay.gold.razer.com escalated to account takeover #723060 No longer public Razer Cross-site Scripting – – $750 287 Deserialization of untrusted data at https://www.redtube.com/media/hls?s=data #1312641 No longer public Pornhub Deserialization and Object Injection – – $10,000 271 Unrestricted file upload leads to Stored XSS #808862 No longer public Visma Public File and Path Handling – – $250 268 idor allows you to delete photos and album from a gallery #380410 No longer public Pornhub Insecure Direct Object Reference – – $1,500 266 IDOR allows any user to edit others videos #681473 No longer public Pornhub Insecure Direct Object Reference – – $1,500 248 Arbitrary File Upload to Stored XSS #808821 No longer public Visma Public Cross-site Scripting – – $250 245 SQL Injection at https://sea-web.gold.razer.com/lab/cash-card-incomplete-translog-resend via period-hour Parameter #781205 No longer public Razer SQL Injection – – $2,000 240 [api.easy2pay.co] SQL Injection at fortumo via TransID parameter [Bypassing Signature Validation🔥] #894325 No longer public Razer SQL Injection – – $4,000 232 Open Redirect in secure.showmax.com #749338 No longer public Showmax Open Redirect – – $550 225 Unsafe charts embedding implementation leads to cross-account stored XSS and SSRF #708589 No longer public New Relic Cross-site Scripting – – – 225 Account Takeover via Email ID Change and Forgot Password Functionality #1089467 No longer public New Relic Authentication – – $2,048 214 Blind SQL injection and making any profile comments from any users to disappear using "like" function (2 in 1 issues) #363815 No longer public Pornhub SQL Injection – – – 211 Publicly exposed SVN repository, ht.pornhub.com #72243 No longer public Pornhub Command and Code Injection – – $10,000 211 Testing #815215 No longer public HackerOne H1P BBP1 No weakness recorded – – – 201 Admin Management - Login Using Default Password - Leads to Image Upload Backdoor/Shell #699030 No longer public Razer Access Control – – $200 199 Through blocking the redirect in /* the attacker able to bypass Authentication To see Sensitive Data sush as Game Keys , Emails ,.. #736273 No longer public Razer Access Control – – $1,000 196 Chaining Bugs: Leakage of CSRF token which leads to Stored XSS and Account Takeover (xs1.tribalwars.cash) #604120 No longer public InnoGames Information Disclosure – – $1,100 186 Unauthenticated access to sensitive user information #702677 No longer public Razer Access Control – – $500 184 SQLi at https://sea-web.gold.razer.com/demo-th/purchase-result.php via orderid Parameter #777693 No longer public Razer SQL Injection – – $2,000 183 Blind SQL injection in Hall of Fap #295841 No longer public Pornhub SQL Injection – – – 179 [IDOR] API endpoint leaking sensitive user information #723118 No longer public Razer Access Control – – $375 172 Misconfigured s3 Bucket exposure #700051 No longer public Razer Access Control – – $500 168 Cross-account stored XSS at embedded charts #709883 No longer public New Relic Cross-site Scripting – – – 158 CRITICAL ISSUE : Leak of all accounts mail login md5 pass and more #514488 No longer public Pornhub Access Control – – – 157 $50 million CTF Writeup #514664 No longer public 50m-ctf Command and Code Injection – – – 152 Stored XSS in notes (charts) because of insecure chart data JSON generation #507132 No longer public New Relic Cross-site Scripting – – – 147 HTTP Request Smuggling at app.workbox.dk #919988 No longer public Visma Public Injection and Smuggling – – $500 139 Multiple endpoints are vulnerable to XML External Entity injection (XXE) #72272 No longer public Pornhub Denial of Service – – $2,500 138 Race condition in activating email resulting in infinite amount of diamonds received #509629 No longer public InnoGames Race Conditions – – $2,000 137 Stored XSS in 'Notes' #788732 No longer public Visma Public Cross-site Scripting – – $250 130 View storyboard of private video @ ht.pornhub.com #138703 No longer public Pornhub Information Disclosure – – $750 130 Stored XSS when uploading files to an invoice #808672 No longer public Visma Public Cross-site Scripting – – $250 128 vulnerabilitie #137723 No longer public Pornhub Authentication – – – 127 Accessible Druid Monitor console on https://api.pay-staging.razer.com/ #702784 No longer public Razer Information Disclosure – – $1,500 126 Arbitrary local system file read on open-xchange server #303744 No longer public Open-Xchange Injection and Smuggling – – $2,000 125 A non-administrator user can change his email even when it is restricted by an administrator #805943 No longer public Visma Public Access Control – – $250 124 HTTP Request Smuggling on vpn.lob.com #694604 No longer public Lob Injection and Smuggling – – $500 123 SQL injection in Razer Gold List Admin at /lists/index.php via the `list[]` parameter. #824307 No longer public Razer SQL Injection – – $2,000 122