security research writeups

CVSS 9.6 Account Takeover in Azerbaijan's Most Visited Platforms

How an OAuth token leakage through Open Redirect enabled complete account takeover on tap.az and turbo.az. A case study on critical vulnerabilities and exemplary vendor response by Digital Classifieds MMC.

Full Write-up