Discovered by: Michael KimVendor: ui-lib (Uilibrary)Product: Stocky – POS with Inventory Management & HRM (“Ultimate Inventory Management System with POS”)Affected Version: 5.0 (as released June 2025)Impact: Arbitrary JavaScript Execution (Stored XSS...
How I Quickly Found a Stored XSS 0day in the QDOCS Smart School 7.0.0
How I Found Several Stored XSS Bugs in Rocket LMS Version 1.9 in Under 10 Minutes
I was scrolling through LinkedIn and noticed a couple of hackers on my newsfeed posting that they passed the mock exam for the CAPen Certification by The SecOps Group. This caught my interest because I had never heard of the Certified AppSec Penteste...
Inspiring new bug bounty hunters with a simple RCE vulnerability discovery.
A bug bounty story by GRuMPz.
This is my journey on hunting and finding my first 0day as a security researcher. CVE-2023-31045.