Google- Multiple Account Creation Bug [Write-up & Video]

Steps to reproduce bug: 1. Go to https://accounts.google.com/SignUpMobile 2. Enter your mobile number and click "Next". You will receive a message on your phone. Open message and there would be a link like http://g.co/xxxx or http://g.co/gms/xxxx 3....

Read more

Google.com XSS [FIXED] [HOF]

Vulnerability Type: Cross Site Scripting (XSS) Reported on 28 June 3013 Fixed Now Details- Sign into Google account and go to: http://www.google.com/merchants/newfeed Now, Tick the box "I want to use Google Spreadsheet to store, edit and upload...

Read more

Paypal- Privilege Escalation Vulnerability [Delete Any User]

Vulnerability Type: Privilege Escalation Vulnerable Website: https://www.paypal-labs.com Status: Fixed Vulnerability Overview: This vulnerability allowed an attacker to delete any user registered in paypal-labs.com. Details/Write-up:  I...

Read more

Google Play - Cross Site Scripting (XSS) Vulnerability

Vulnerability Type: Cross Site Scripting (XSS) Reported on 16 July 3013 Fixed on 17 July 2013 Details/Writeup- Google recently changed it's design of Google Play which lead to this XSS vulnerability. Head to Google Play settings (https://play...

Read more