bug bounty writeups

-1-Stored XSS in icloud.com:

https://vbharad.medium.com/stored-xss-in-icloud-com-5000-998b8c4b2075


-2-IDOR via Websockets allow me to takeover any users account:


https://mokhansec.medium.com/idor-via-websockets-allow-me-to-takeover-any-users-account-23460dacdeab



-3-Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies:


https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610



-4-Facebook Messenger Desktop App Arbitrary File Read:


https://medium.com/@renwa/facebook-messenger-desktop-app-arbitrary-file-read-db2374550f6d