Categories
Bug Bounty
2025
Overlooked CORS Misconfiguration led to CSRF on Core Asset of Swisscom
Bypassing SMS OTP Authentication or a story behind $16.5k in bounties