Posts tagged with #writeups

• 🔒 CVSS 7.7 Search Algorithm Manipulation on LinkedIn

  Dec 21, 2025 (in 2 weeks) 1000 rvfet

  

  security research writeups

  How I discovered and responsibly reported an on-site and off-site search poisoning vulnerability that leads to indistinguishable user deception attacks on LinkedIn.

  Full Write-up

• 🔒 CVSS 5.8 Google Infrastructure Exhaustion Vulnerability

  Dec 9, 2025 (in 3 days) 1000 rvfet

  

  security google research writeups

  How I discovered a Severity 2 Zero Attribution Risk vulnerability in Google Image Proxy that could be exploited to exhaust Google's Infrastructure.

  Full Write-up

• 🔒 CVSS 9.6 Account Takeover in Azerbaijan's Most Visited Platforms

  Dec 8, 2025 (in 2 days) 1000 rvfet

  

  security research writeups

  How an OAuth token leakage through Open Redirect enabled complete account takeover on tap.az and turbo.az. A case study on critical vulnerabilities and exemplary vendor response by Digital Classifieds MMC.

  Azərbaycanca Full Write-up

• CVSS 8.1 Permanent State Corruption in Linear.app

  Dec 5, 2025 (yesterday) 1000 rvfet

  

  security research writeups logic-bug

  Discovering a logic vulnerability that allowed any authenticated user to permanently brick workspaces in Linear. Used by OpenAI, Scale, and Perplexity.

  Full Write-up