Browsing Category
Bug Bounty Writeups
4 posts
The $500 Bug: Explaining the IDOR Vulnerability
Bug bounty platforms are full of writeups about researchers earning several hundred dollars for a single, almost simple…
The $200 Bug: Explaining the Clickjacking Vulnerability
Clickjacking, also known as a UI Redress Attack, is a client-side security vulnerability where an attacker tricks a…
The $2000 Bug: Explaining the Log4shell (Log4J) Vulnerability
Log4Shell (CVE-2021-44228) is a critical remote code execution (RCE) vulnerability in Apache Log4j 2, a widely used Java…
The $25,000 Bug: Explaining the React2shell Vulnerability
“React2Shell” is the name for the critical vulnerability CVE-2025-55182, which allows unauthenticated Remote Code Execution (RCE) in React…