How Did I Easily Find Stored XSS at Apple And Earn $5000 ?
Target Program: Apple
🎯 Vulnerability: Cross-Site Scripting (XSS)
💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.
More Writeups Like This
pentester.land
by Aayush kumar (@bunny_0417)Stored XSS in LibreOffice
pentester.land
by Supakiad S. (@Supakiad_Mee)Persistent XSS on Microsoft Bing.com by poisoning Bingbot indexing
pentester.land
by Viktor Chuchurski (@viktorot), Francesco Lacerenza (@lacerenza_fra)Canary Token OSS Security Audit Report (Q2 2024)
pentester.land
by Pham Van Khanh