Write-upAuthentication bypass
Auth bypass on API token refresh
How a critical authentication bypass in *.northwind.com was found, reported to Northwind Cloud and fixed.
Write-ups from the researchers who found the bugs, guides on how they work, and advisories from the companies that fixed them. A write-up is tied to a real report, published under that program’s own disclosure policy.
How a critical authentication bypass in *.northwind.com was found, reported to Northwind Cloud and fixed.
How a critical other in Webhook delivery service was found, reported to Orbit Payments and fixed.
How a critical sql / command injection in secure.meridianbank.com was found, reported to Meridian Bank and fixed.