InJavaScript in Plain EnglishbyAswin KV·May 21, 2023Client Side Template Injection (CSTI)Impact, Exploitation, and Recommended Mitigation Measures
InILLUMINATIONbyAswin KV·Mar 13, 2023Exploiting Paypal Payment Gateway Results In Free ShoppingHello everyone, I’m Aswin ,Security Researcher from Kerala,India.
InInfoSec Write-upsbyAswin KV·Mar 21, 2023Reflected XSS on Admin Login PageHi! I’m Aswin,security researcher and a penetration tester.Here we are discussing reflected XSS in a private bug bounty program.
InSystem WeaknessbyAswin KV·Mar 23, 2023Unicode Normalization Leads to Account TakeoverHello everyone,A response icon2A response icon2
InSystem WeaknessbyAswin KV·Mar 31, 2023Open Redirect Vulnerability: A Potential Threat to User SecurityA Bug Bounty Report on the Risks of Unvalidated URL Redirections in Websites and Applications
InSystem WeaknessbyAswin KV·Apr 5, 2023Stored DOM XSSDiscovering and addressing a critical security flaw
InSystem WeaknessbyAswin KV·Apr 13, 2023SMTP InjectionHow a Single Email Can Compromise Your SecurityA response icon1A response icon1
InInfoSec Write-upsbyAswin KV·May 2, 2023LDAP InjectionA Critical Security Flaw Exposing the Application to LDAP Injection Attacks
InInfoSec Write-upsbyAswin KV·May 26, 2023URN InjectionHigh-severity vulnerability enables unauthorized access and potential data leakage.
InSystem WeaknessbyAswin KV·May 30, 2023Critical Union-Based SQL Injection VulnerabilityUnauthorized Access and Data Leakage via Union-Based SQL InjectionA response icon1A response icon1