Nuxt framework
Nuxt served /Admin like /admin, but its server-side route rules only matched the exact case, so redirects and headers were skipped.
Read the finding
Research
Findings, disclosed.
Published CVEs and responsibly disclosed vulnerabilities in government portals, healthcare, and open-source software. Each write-up covers what the issue was, what it exposed, and how it was fixed.
- 8
- Findings on record
- 4
- Published CVEs credited
- 4
- Critical severity
- 135M+
- Accounts in scope of one fix
UMANG Portal
Weaknesses across UMANG services exposed EPFO account numbers, LPG bookings, and Aadhaar numbers stored in plain text.
Read the finding
Rollup bundler
Rollup's filename sanitizer kept ../ sequences, so crafted names could write files outside the output folder.
Read the finding
Parsl workflow framework
Parsl's monitoring views pasted the workflow ID from the URL straight into SQL queries.
Read the finding
MCP Watch
A scanner for MCP servers passed the GitHub URL straight to a shell, so a crafted URL ran commands.
Read the finding
Income Tax e-Filing Portal
Changing one PAN value returned another taxpayer's Aadhaar, bank accounts, and income. 135M+ accounts in scope.
Read the finding
Apollo Hospitals
A public zip file held patient reports, ID documents, source code, and live payment and SMS gateway keys.
Read the finding
Enterprise SSO Gateway
Authentication bypass in an enterprise single sign-on gateway. Write-up after disclosure completes.
Not public yet
No findings match these filters.