tonysec

Available for immediate withdrawal€2,550

Professional Bio

Crafting your researcher identity starts here. Edit your settings to add a bio.

Documented

Writeups

Cheatsheets

Tools

Cross-site Scripting (XSS) - Reflected (CWE-79)FREE

Generic XSS caused by improper handling of user-controlled input in the URL path

tonysec

350

Apr 22, 2026

CVSS7.2

€600

Acceptance of Extraneous Untrusted Data With Trusted Data - Cache Poisoning (CWE-349)FREE

PortSwigger-lab-style cache poisoning via Referer + Akamai WAF bypass → zero-interaction ATO

tonysec

169

May 30, 2026

CVSS9.3

€1,100

Cross-site Scripting (XSS) - Stored (CWE-79)FREE

Stored Cross-Site Scripting via SVG File Upload Filter Bypass

tonysec

Mar 2, 2026

CVSS6.1

€850