Cybersecurity Researcher & Bug Hunter

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Tags stored-xss

Tag

stored-xss 1

From a Sanitized Name Field to One-Click Account Takeover May 25, 2026

Recently Updated

From a Sanitized Name Field to One-Click Account Takeover
Deanonymizing Users at Scale: When Blocking Becomes an Oracle
A University Web Audit
Cache Deception + CSPT: Turning Non Impactful Findings into Account Takeover

Trending Tags

web-security account-takeover bug-bounty blind-xss business-logic cache-deception client-side-path-traversal cookie-bomb cspt default-creds

© 2026 Jorge Cerezo Dacosta. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

web-security account-takeover bug-bounty blind-xss business-logic cache-deception client-side-path-traversal cookie-bomb cspt default-creds

A new version of content is available.