Master Bug Bounty Hunting: Your Guide to Breaking into Cybersecurity for Newcomers

#cve

Articles tagged with #cve

Sep 20, 2025
Sep 20, 20254 min read637 views
CVE-2025-57204: Stored XSS in Stocky POS with Inventory Management & HRM (ui-lib) 5.0
Discovered by: Michael KimVendor: ui-lib (Uilibrary)Product: Stocky – POS with Inventory Management & HRM (“Ultimate Inventory Management System with POS”)Affected Version: 5.0 (as released June 2025)Impact: Arbitrary JavaScript Execution (Stored XSS...
4 min read637 views
Sep 20, 2025
Sep 20, 20254 min read497 views
CVE-2025-57205: Stored XSS in iNiLabs School Express 6.2 (SMS Express)
Discovered by: Michael Kim & Sergio MedeirosVendor: iNiLabsProduct: School Express – School Management System (SMS Express)Affected Version: 6.2 (other versions not tested)Impact: Arbitrary JavaScript Execution (Stored XSS)Attack Type: Remote (Authen...
4 min read497 views
Sep 20, 2025
Sep 20, 20257 min read162 views
CVE-2025-57203: Stored XSS in MagicAI 9.1 (AI Chat) Enables Arbitrary JavaScript Execution
Discovered by: Michael Kim & Sergio MedeirosVendor: LiquidThemesProduct: MagicAI (a.k.a. MagicProject AI)Affected version: 9.1 (other versions untested)Impact: Arbitrary JavaScript execution in users’ browsers (stored XSS)Attack type: Authenticated r...
7 min read162 views
Jun 12, 2024
Jun 12, 20242 min read2.5K views
CVE-2024-37629: Simple XSS Payload Exploits 0day Vulnerability in 10,000 Web Apps
The Power of Simplicity: A Bug Bounty Tale with Big Results
2 min read2.5K views
May 17, 2024
May 17, 20243 min read1.7K views
CVE-2024-34241: A Step-by-Step Discovery Guide
How I Found Several Stored XSS Bugs in Rocket LMS Version 1.9 in Under 10 Minutes
3 min read1.7K views
Apr 22, 2024
Apr 22, 20242 min read1.6K views
Uncovering an SSRF Vulnerability in PDFMyURL Affecting Numerous Users
A bug bounty story by GRuMPz.
2 min read1.6K views