Etiqueta: Apprentice

Stored XSS into HTML context with nothing encoded

Reflected XSS into HTML context with nothing encoded

File path traversal, simple case

Basic SSRF against the local server

Accessing private GraphQL posts

SQL injection vulnerability allowing login bypass

SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

Web shell upload via Content-Type restriction bypass

Remote code execution via web shell upload

Exploiting LLM APIs with excessive agency writeup