السلام عليكم ورحمة الله وبركاتة Who am I? I am Mohammed Fadhl Al-Barbari, a cybersecurity researcher, tools builder, and bug hunter from Yemen, active on platforms such as HackerOne (H1), BugCrowd, and SRT.

This blog will be updated with more information about the vulnerability and the exploitation once the CVE is assigned. Discovered by: Mohammed Fadhl Al-Barbari

This blog will be updated with more information about the vulnerability and the exploitation once the CVE is assigned. Discovered by: Mohammed Fadhl Al-Barbari

This blog will be updated with more information about the vulnerability and the exploitation once the CVE is assigned. Discovered by: Mohammed Fadhl Al-Barbari & Zeyad Azima

Author Mohammed Al-Barbari aka @m4dm0e

Hi there!, this will be short explaination of the vulnerability I’ve found at IPeakCMS 3.5 which is SQLi and it’s Blind so let’s begin …

Hi there!, this will be short explaination of the vulnerability I’ve found at Incom 2.0 (Latest version) which is open redirect …

Hi there!, I’ve discovered endpoint that accepts any file and upload it without any validation or even being authentication