SMSyarif Muhammad Sajjadinbountyproofs.com·Mar 25 · 4 min readCVE-2025-14812: Zero-Click Address Bar Spoofing in Arc Browser iOSAssalamualaikum, my name is Syarif Muhammad Sajjad, also known as syarif07 on HackerOne. In this writeup, I’ll walk through one of my findings that was assigned CVE-2025-14812, a high-severity vulnera20
SMSyarif Muhammad Sajjadinbountyproofs.com·Nov 9, 2025 · 4 min readThe Username That Vanished from Logs — A Business Logic Breakdown worth more than $xxxScope: bugbounty.[REDACTED TARGET]Weakness: Business Logic ErrorsSeverity: Low (3.4) $xxxReporter: @syarif07Report date: 2025-05-31 Note: The target name has been intentionally censored in this public writeup. References to the affected service appe...00
