Status Data

Close notification

KYC

@OctaYus

Member since: October 25, 2024

Egypt Available for hire

Rank1556

Reputation172

Paid Reports0

AboutReports (0)Influenced Programs (2)Achievements (0)

:]

Reports (0)

No disclosed reports at the moment This user has no disclosed reports or reports are in review.

Own articles

Dependency Confusion RCE Vulnerability ReportBy publishing a malicious package with the same name, an attacker could execute arbitrary commands during the company’s build or CI pipeline, leading to full compromise of the environment.

Authorization Bypass via Response ManipulationIf an attacker could modify the response from that endpoint, they could impersonate an admin and perform unauthorized actions.

Logic Flaw Allows Unlimited Likes on VideosA critical business logic vulnerability was discovered in redacted.com's video reaction system, enabling unlimited like inflation through GraphQL mutation replay attacks. The flaw allows any authenticated user to artificially boost engagement metrics by repeatedly sending the same "like" request, as the backend:

Paid Reports (0)

Critical0

High0

Medium0

Low0

None0

Streak

Aug

Sep

Oct

Nov

Dec

Jan

Feb

Mar

Apr

May

Jun

Jul

Skills

Websmart contractappsblockchain

Influenced Programs (2) View all