User Profile

Me

tungpun

About

s'"><svg/onload=alert(444);>sasda

Personal website:
https://tungpun.pw

Recognised by

 

tungpun's Recent Activity

View tungpun's statistics

[serve] Stored XSS in the filename when directories listing

Disclosed by tungpun on Nodejs-ecosystem on 2018-10-19

[serve] Server Directory Traversal

Disclosed by tungpun on Nodejs-ecosystem on 2018-07-02

[mcstatic] Server Directory Traversal

Disclosed by tungpun on Nodejs-ecosystem on 2018-06-12

[html-pages] Stored XSS in the filename when directories listing

Disclosed by tungpun on Nodejs-ecosystem on 2018-06-12

[public] Stored XSS in the filename when directories listing

Disclosed by tungpun on Nodejs-ecosystem on 2018-06-12

[angular-http-server] Server Directory Traversal

Disclosed by tungpun on Nodejs-ecosystem on 2018-04-26

[cloudcmd] Stored XSS in the filename when directories listing

Disclosed by tungpun on Nodejs-ecosystem on 2018-04-25

Internal Ports Scanning via Blind SSRF

Disclosed by tungpun on Infogram on 2017-11-03

Internal Ports Scanning via Blind SSRF

Disclosed by tungpun on Newrelic on 2017-10-11

Add another email address without verification

Disclosed by tungpun on Weblate on 2017-10-05

Reflected XSS - gratipay.com

Disclosed by tungpun on Gratipay on 2017-08-25