1 article
Chaining an OTP bypass, a wallet-balance business-logic flaw, and a stored XSS in file uploads to compromise a virtual assistance platform.