Home / Tag: vulnerability

Tag: vulnerability

First Touch Games database information leak

9 February 2018 Mustafa Kemal Can

Hi everyone in this post I’ll show you how I find out First Touch Games database information. It is actually happens because of a common mistake. Let’s see. FTS is a populer football game which is available on Android and iOS platforms. I dont know why but they are still using very old version of…

27 December 2017 Mustafa Kemal Can

Articles

0 Comment

bug bounty cyber security file upload xss muskecan mustafa kemal can smartsheet xss unathorized xss vulnerability xss xss vulnerability

Hi, today I want to explain XSS vulnerability that I found on Smartsheet.com. Smartsheet XSS vulnerability is an interesting vulnerability because it occurs via file upload! By the way I want to clarify that, this XSS works with or without authorization, so it is dangerous vulnerability as well as interesting. What is Smartsheet and more…

bypass-two-factor-authentication on login.gov

14 November 2017 Mustafa Kemal Can

Articles

0 Comment

bug bounty bypass bypass 2fa bypass two factor auth bypass two factor authentication hack hackerone login.gov muskecan mustafa kemal can vulnerability

I found a way to bypass two factor authentication on login.gov which contains critical informations in it. This vulnerability occurs because of the misconfigurated token. The account creating process of login.gov is very interesting. You need to confirm your email first, instead of last. I realised that this might cause some security problems. And it…