https://academy.logicalbreach.com/ Latest bug bounty writeups, tools and security cheatsheets en-us Thu, 30 Jul 2026 04:54:41 GMT https://academy.logicalbreach.com//writeups/wildcard-account-lookup-and-unsalted-hash-identifiers-defeat-pii-masking-202f1403 26159660-6cf5-4c06-b43a-4b63c94fb280 Tue, 21 Jul 2026 18:54:37 GMT https://academy.logicalbreach.com//writeups/pre-authentication-payroll-history-idor-via-a-client-supplied-employee-identifier-20659bac c4269ee2-9e3e-45ca-aa95-9ecb0683bce5 Tue, 21 Jul 2026 18:52:14 GMT https://academy.logicalbreach.com//writeups/unauthenticated-oracle-boolean-based-sql-injection-through-a-legacy-search-filter-4f97867e 87b3befd-797a-431b-a737-7a8e662190fb Tue, 21 Jul 2026 18:46:49 GMT https://academy.logicalbreach.com//writeups/unauthenticated-pl-sql-injection-via-a-package-name-parameter-oracle-error-based-42826779 feeec660-cd3d-404c-b312-4b9567009e47 Thu, 16 Jul 2026 14:23:23 GMT https://academy.logicalbreach.com//writeups/unauthenticated-error-based-sql-injection-via-an-identity-header-siteminder-sm-user-975333f3 eb11cba0-0288-44e6-b026-871cc81dce67 Tue, 14 Jul 2026 10:36:13 GMT https://academy.logicalbreach.com//writeups/reflected-xss-in-import-map-overrides-enables-account-takeover-212e75e5 579e7431-7811-434f-a798-5db195dc84de Wed, 08 Jul 2026 17:43:31 GMT https://academy.logicalbreach.com//writeups/unauthorized-access-to-pii-via-improper-authentication-in-registration-endpoint-b03c7a9b b93f7290-df71-4915-9418-2cebc5dda733 Wed, 08 Jul 2026 17:41:11 GMT https://academy.logicalbreach.com//writeups/dom-xss-in-charting-service-s-url-parameter-enables-phishing-bd379e36 8639e0ee-a1c6-4eb3-a682-6bfa282ea83f Wed, 08 Jul 2026 17:38:56 GMT https://academy.logicalbreach.com//writeups/reflected-xss-in-chart-widget-via-connectorurl-parameter-ceb5bf74 5c96825a-90da-4c94-b6a6-d54b65432c5f Wed, 08 Jul 2026 17:06:07 GMT https://academy.logicalbreach.com//writeups/cve-2026-40762-unauthenticated-sql-injection-in-wpgraphql-2-11-1-f85ad3b3 429cb620-d596-4b9b-8c73-9a8cd42df69b Wed, 08 Jul 2026 09:51:31 GMT ` identifier and reached a MySQL query path.]]> https://academy.logicalbreach.com//writeups/improper-access-control-via-public-api-key-leads-to-mass-pii-disclosure-e3ccd56e 214a9016-72bf-4722-8a76-4fb5b1413dcc Mon, 06 Jul 2026 13:56:11 GMT https://academy.logicalbreach.com//writeups/improper-access-control-via-client-supplied-document-identifier-leads-to-pii-disclosure-29367c5a 4d265d0a-f2b3-4428-9b07-6f9382c403b3 Fri, 03 Jul 2026 14:58:24 GMT https://academy.logicalbreach.com//writeups/path-traversal-via-an-unauthenticated-export-download-action-using-client-controlled-directory-and-filename-parameters-a9c49b9e 92fd26df-8c0f-4adb-a9bc-abc0c3e27bf3 Tue, 30 Jun 2026 15:56:29 GMT https://academy.logicalbreach.com//writeups/post-based-xss-using-octal-escapes-51f1aab9 f589d1de-a1f1-4e61-816e-aece5bdb4ae7 Fri, 26 Jun 2026 12:00:12 GMT https://academy.logicalbreach.com//writeups/cve-2026-12064-proto-default-skips-ssh-verification-204ef8ee 41bfddbe-d4f0-4da9-9b5f-647af831ce62 Wed, 24 Jun 2026 08:29:28 GMT https://hackerone.com/reports/3797526 by alienowo]]> https://academy.logicalbreach.com//writeups/cve-2026-11586-ws-auto-pong-memory-exhaustion-7ef6089f 8164da75-5dec-4969-b309-89213ee8f599 Wed, 24 Jun 2026 08:29:15 GMT https://hackerone.com/reports/3788931 by evergarden1123]]> https://academy.logicalbreach.com//writeups/cve-2026-8924-trailing-dot-domain-super-cookie-139be04c c59efc5f-8a1d-4384-9449-760e967a9240 Wed, 24 Jun 2026 08:28:44 GMT https://hackerone.com/reports/3733905 by vegagent]]> https://academy.logicalbreach.com//writeups/cve-2026-9546-sending-old-referer-3443496d 6d6e4d88-969b-4b37-a128-33cfdd3b6743 Wed, 24 Jun 2026 08:27:22 GMT https://hackerone.com/reports/3754343 by fafawf]]> https://academy.logicalbreach.com//writeups/cve-2026-9079-stale-proxy-password-leak-9dada8bb 9fe5faf9-d38e-47cb-8baf-9638c9884ce7 Wed, 24 Jun 2026 08:26:56 GMT https://hackerone.com/reports/3750295 by keen4n]]> https://academy.logicalbreach.com//writeups/cve-2026-9080-uaf-after-pause-in-socket-callback-1308e440 8d7350e0-6624-4e83-a8d2-215810ed4438 Wed, 24 Jun 2026 08:25:17 GMT https://hackerone.com/reports/3749204 by giant_anteater]]> https://academy.logicalbreach.com//writeups/cve-2026-8932-incomplete-mtls-config-matching-in-conn-reuse-93418df6 730287fe-c3f5-4611-a0e5-fe7303c9d37c Wed, 24 Jun 2026 08:25:03 GMT https://hackerone.com/reports/3733910 by giant_anteater]]> https://academy.logicalbreach.com//writeups/cve-2026-8927-env-set-cross-proxy-digest-auth-state-leak-d7ef4fa7 cd7c4e58-523c-49b2-807f-12bc13d060ff Wed, 24 Jun 2026 08:24:47 GMT https://hackerone.com/reports/3744543 by adyej]]> https://academy.logicalbreach.com//writeups/cve-2026-8925-sasl-double-free-41c92280 771907ac-5178-4b01-b1f0-5cfaaa1d8aa3 Wed, 24 Jun 2026 08:23:35 GMT https://hackerone.com/reports/3735193 by giant_anteater]]> https://academy.logicalbreach.com//writeups/cve-2026-8926-password-leak-with-netrc-and-user-in-url-6c2e0dc5 82a733f7-048d-499d-9130-7944bc9a0618 Wed, 24 Jun 2026 08:23:22 GMT https://hackerone.com/reports/3735184 by giant_anteater]]> https://academy.logicalbreach.com//writeups/cve-2026-8458-wrong-reuse-for-different-services-0ca242a7 7b4ca2ac-0761-43a7-a104-85d7e88df436 Wed, 24 Jun 2026 08:23:10 GMT https://hackerone.com/reports/3721183 by areksaxyz]]> https://academy.logicalbreach.com//writeups/cve-2026-9545-exposing-http-3-early-data-75ab63c3 ada6a82e-4510-452a-b36a-3258b293f33e Wed, 24 Jun 2026 06:24:17 GMT https://hackerone.com/reports/3752888 by hahahkim]]> https://academy.logicalbreach.com//writeups/cve-2026-11856-cross-origin-digest-auth-state-leak-ad2b7af3 18e75e38-298c-4c9d-80d6-e039635f53bc Wed, 24 Jun 2026 06:21:56 GMT https://hackerone.com/reports/3793260 by jjchuck]]> https://academy.logicalbreach.com//writeups/taskcluster-web-server-oauth2-authorization-codes-are-reusable-and-the-exchange-handler-checks-the-wrong-expiry-column-3cdf46bf 2cc5d9f0-4647-48ae-a910-850a87896450 Tue, 23 Jun 2026 12:37:52 GMT https://hackerone.com/reports/3734676 by anshuman_bh]]> https://academy.logicalbreach.com//writeups/1-click-account-takeover-via-open-redirect-through-regex-bypass-in-domain-validation-4152a0e1 02b87d5f-529f-470d-aa74-6a1db7bc122a Sat, 20 Jun 2026 15:58:07 GMT https://hackerone.com/reports/3723458 by farr]]> https://academy.logicalbreach.com//writeups/reflected-xss-in-ai-chat-bot-greetings-at-help-shopify-com-via-markdown-image-rendering-dba93ba5 4bc4b6b9-ec9a-45af-9937-40cb9588b823 Thu, 18 Jun 2026 12:48:02 GMT https://hackerone.com/reports/2509022 by saltymermaid]]> https://academy.logicalbreach.com//writeups/authenticated-elasticsearch-painless-script-execution-via-query-search-sort-query-on-hackerone-com-graphql-0e9e43e7 d7983a88-8380-4729-8704-91a5484f49f8 Wed, 17 Jun 2026 14:17:26 GMT https://hackerone.com/reports/3694007 by brumbelow]]> https://academy.logicalbreach.com//writeups/malicious-conflux-endpoint-can-leave-stale-global-ooo-queue-accounting-after-teardown-a766f087 88081149-c9aa-4f2f-946d-c482c56276d9 Tue, 16 Jun 2026 07:16:47 GMT https://hackerone.com/reports/3701692 by aptupdate]]> https://academy.logicalbreach.com//writeups/burp-suite-professional-browser-powered-crawl-can-write-attacker-controlled-files-through-file-input-handling-4a6c87e7 51eb997f-2e42-4a75-a65d-35dfa68d90de Sun, 14 Jun 2026 08:08:52 GMT https://hackerone.com/reports/3712279 by kawakatz]]> https://academy.logicalbreach.com//writeups/command-injection-via-unsanitized-bundling-options-in-aws-cdk-lib-aws-lambda-nodejs-ab1f3c90 706dc85d-bf70-4974-af76-d954f355b8b8 Thu, 11 Jun 2026 16:54:20 GMT https://hackerone.com/reports/3558713 by inkerton]]> https://academy.logicalbreach.com//writeups/ssrf-via-improper-redirect-validation-in-rocket-chat-oembed-function-9647fc33 30b21de7-1d40-47e9-83c4-fe22da93e337 Thu, 11 Jun 2026 11:52:32 GMT https://hackerone.com/reports/3383079 by button142857]]> https://academy.logicalbreach.com//writeups/ssrf-via-improper-validation-after-dns-name-resolution-in-the-link-preview-feature-6463037a 04b7a1a3-ec72-44e2-9734-bcce2a57eeeb Thu, 11 Jun 2026 11:52:25 GMT https://hackerone.com/reports/3393664 by button142857]]> https://academy.logicalbreach.com//writeups/action-text-redos-ruby-3-1-or-lower-170d95f9 082ed25a-639c-4a0e-8e8a-affefef19891 Tue, 09 Jun 2026 04:37:55 GMT https://hackerone.com/reports/2389431 by ooooooo_q]]> https://academy.logicalbreach.com//writeups/dll-side-loading-vulnerability-in-sony-music-center-for-pc-ver-2-7-2-latest-version-17dec387 d31e5ce7-d3da-4924-8071-65cd06cc082f Fri, 05 Jun 2026 09:10:24 GMT https://hackerone.com/reports/3355766 by resurrect20]]> https://academy.logicalbreach.com//writeups/dll-side-loading-vulnerability-in-sony-music-center-for-pc-ver-2-7-2-latest-version-941b1260 bbee4e32-4d6c-4bd5-a72f-aff019c4bedd Fri, 05 Jun 2026 09:10:24 GMT https://hackerone.com/reports/3355766 by resurrect20]]> https://academy.logicalbreach.com//writeups/hardcoded-authentication-token-in-public-js-admin-api-session-takeover-0d9d0d46 0f5df200-0d17-4e56-a886-6e2da285b208 Fri, 05 Jun 2026 08:23:26 GMT https://academy.logicalbreach.com//writeups/improper-access-control-on-www-target-example-through-services-formcampaign-via-header-option-leads-to-unauthenticated-read-write-on-the-production-marketing-campaign-database-b84f1127 e6b2303c-ba46-4e14-8e41-11eef60d83f6 Mon, 01 Jun 2026 09:09:18 GMT https://academy.logicalbreach.com//writeups/stored-xss-in-public-share-preview-silently-exposes-the-victim-s-entire-drive-e63671bc c48aa92f-f865-4885-9e97-00e8bec33ae7 Mon, 01 Jun 2026 09:01:59 GMT https://academy.logicalbreach.com//writeups/blind-post-ssrf-via-web-push-notification-endpoint-3e0fc1d7 303c963f-802d-4d16-a0f9-5e5c6ad0f508 Sat, 30 May 2026 16:47:37 GMT https://hackerone.com/reports/3608558 by misop00p]]> https://academy.logicalbreach.com//writeups/email-verification-bypass-email-squatting-via-client-side-accounts-setaccountinfo-46c1127b 5ba3fdc3-573f-48b1-aaaa-fc3ca9f3f6ff Sat, 30 May 2026 14:41:50 GMT https://academy.logicalbreach.com//writeups/admin-panel-exposure-via-waf-bypass-url-encoding-broken-recaptcha-internal-info-leak-0008950f 20482471-ba91-4f23-896a-8031f30b93a9 Sat, 30 May 2026 14:39:30 GMT https://academy.logicalbreach.com//writeups/dom-xss-on-central-sso-origin-via-unvalidated-retryurl-waf-bypass-with-javascript-name-ac701cac ce375e45-4e79-45ae-bc31-06f134750b58 Sat, 30 May 2026 14:35:23 GMT https://academy.logicalbreach.com//writeups/inventory-disruption-via-quantity-manipulation-in-order-creation-99c02266 0d7016bb-62f1-4195-97cd-324aed48fd62 Sat, 30 May 2026 14:32:15 GMT https://academy.logicalbreach.com//writeups/payment-method-validation-bypass-via-order-update-flow-0f9955f9 48ee7179-d538-4ecf-8c44-e6dade5a8f63 Sat, 30 May 2026 14:28:58 GMT https://academy.logicalbreach.com//writeups/a-portswigger-lab-style-cache-poisoning-pre-auth-ato-with-a-single-request-6dce8f5e c3d6a5e6-edf4-4d85-9ca6-bd0250b40e41 Sat, 30 May 2026 10:19:44 GMT https://academy.logicalbreach.com//writeups/v1plugin-decrypt-panics-on-empty-ciphertext-remote-dos-2d43856a 2ebbb2cb-7398-4fcf-b007-927c677a8bac Thu, 28 May 2026 16:40:31 GMT https://hackerone.com/reports/3620748 by misop00p]]>