Posts tagged with #writeups

• 🔒 CVSS 6.4 Search Algorithm Manipulation on LinkedIn

  Dec 21, 2025 (in 2 weeks) 1000 rvfet

  

  security research writeups

  Affected Company:

  LinkedIn

  How I discovered and responsibly reported an on-site and off-site search poisoning vulnerability that leads to indistinguishable user deception attacks on LinkedIn.

  Full Write-up

• 🔒 CVSS 8.1 Permanent State Corruption in Linear.app

  Dec 10, 2025 (in 4 days) 1000 rvfet

  

  security research writeups logic-bug

  Affected Company:

  Linear.app

  Discovering a logic vulnerability that allowed any authenticated user to permanently brick workspaces in Linear. Used by OpenAI, Scale, and Perplexity.

  Full Write-up

• 🔒 CVSS 5.8 Google Infrastructure Exhaustion Vulnerability

  Dec 9, 2025 (in 3 days) 1000 rvfet

  

  security google research writeups

  Affected Company:

  Google

  How I discovered a Severity 2 Zero Attribution Risk vulnerability in Google Image Proxy that could be exploited to exhaust Google's Infrastructure.

  Full Write-up

• CVSS 9.6 Account Takeover in Azerbaijan's Most Visited Platforms

  Dec 1, 2025 (5 days ago) 1000 rvfet

  

  security research writeups

  Affected Companies:

  tap.az ,

  turbo.az

  How an OAuth token leakage through Open Redirect enabled complete account takeover on tap.az and turbo.az. A case study on critical vulnerabilities and exemplary vendor response by Digital Classifieds MMC.

  Azərbaycanca Full Write-up