@l1ghtn1ng

DOM XSS en un runtime de formularios embebibles (inyección de esquema de URL)

Open Redirect con Referer Check + Domain Bypass (@)

Path Traversal via Invoice Download

Mass Assignment Privilege Escalation

SSRF with Corporate Token Exfiltration

Reflected XSS on 404 Error Page

Client-Side Path Traversal to Admin Password Change

Open Redirect in Login/Logout

NASA - Client-Side Auth Bypass via Match & Replace

NASA - Rails Approval Bypass via Mass Assignment