3907

Disclosures

<-

Latest

Disclosure date // No. // Vulnerability // Write-up

31/7 [0x3] Unauthenticated signing with operator keys

github.com/3907-bh/unlock-insecure-[redacted]

24/7 [0x2] Unauthenticated Firebase custom-token mint for arbitrary UID leading to cross-session read/write of PayPal's production checkout message bus

github.com/3907-bh/pffffummm

21/7 [0x1] Auth Bypass leading to data r/w and arbitrary file upload

github.com/3907-bh/NullCheck