WebVerse Pro Writeups

A community radio station that stacks five vulnerabilities, each one individually mitigated, into a single unbroken chain from an anonymous visitor to command execution. Spoiler-light notes — no f...

A “professional report builder” that proudly advertises it will fetch any URL you give it, server-side, and embed the result in a PDF. It is not wrong about that. The internal dashboard it can reac...

An online storefront whose developer left the full vulnerability roadmap sitting in the web root as a to-do list — and then relied on a Content Security Policy to cover the parts they hadn’t finish...

A tattoo studio’s booking site that declared its own vulnerability in a CSS comment. The obvious path was a decoy — the real way in was a poisoned password-reset email and a templating engine that ...

A spreadsheet app with an admin console that is “blocked at the edge” — which turns out to be a precise description of the whole problem. The guard lives in one tier; the content lives in another; ...

A portal where operatives file mission reports and an automated reviewer endorses them. The flag isn’t in any database field you can reach — it exists inside the reviewer’s browser for exactly one ...

A fictional “detonation portal” where reaching the top clearance level is the whole objective — and three small, independently boring bugs chain into it without a single exploit that would survive ...

An accounts-payable portal where two solid bugs fall out quickly — and the final step is genuinely dead on the installed runtime. Worth writing up because it doesn’t finish. Spoiler-light notes — ...

A small law-firm site with a contact form nobody reads — except a clerk, every morning, who turns out to be a headless browser holding a logged-in session. Spoiler-light notes — no flags, credenti...