Multiple Severe Vulnerabilities in MonkeyType.Com Chat Based XSS, Auth bypass, User Spoofing - Write-ups and Disclosures - @disclose_io Community Forum

I published the original article over at my independent research project obsrva.org Executive Overview In May 2021, independent security researcher Tyler Butler found several critical vulnerabilities in monkeytype.com, a popular open-source typing-test application with a booming community of over 100k daily unique visitors. The vulnerabilities included stored cross-site scripting and user impersonation in the tribe chat room feature, as well as an authentication bypass vulnerability enablin

Multiple Severe Vulnerabilities in MonkeyType.Com Chat Based XSS, Auth bypass, User Spoofing - Write-ups and Disclosures - @disclose_io Community Forum

One Token to leak them all : The story of a $8000 NPM_TOKEN, by Aseem Shrey (@aseemshrey)

How to limit login attempts in WordPress?

Bug Bounty POC - All Bug Bounty POC write ups by Security Researchers.

AWS S3 bucket writeable for authenticated aws users - Bug Bounty POC

Solving BugPoc XSS challenge. Heyy Everyoneee,, by Sudhanshu Rajbhar

Hacking_SharePoint_FINAL

Stored Cross-Site Scripting (XSS) via Tribe Chat · Issue #1476 · monkeytypegame/monkeytype · GitHub

CVE-2022-3415] WordPress Plugin Chat Bubble 2.2 – Unauthenticated Stored Cross-Site Scripting – INFAYER

Lab 44 – Web server vulnerability scanning with Zed Attack Proxy