Avinash Kumar Yadav (avinash_)
Follow
Ranchi, India 🇮🇳
Joined June 2017
Stats
90 Days
-
Signal
-
Percentile
-
Impact
-
Percentile
-
Reputation
-
Rank
Credits
80
Vulnerabilities found
39
Thanks received
Recent Badges
Hacktivity
The /reports/:id.json endpoint disclosed potentially sensitive user attributes, including the reporter's email, OTP backup codes, phone number, graphql_secret_token, and t-shirt size when a reporter summary was present. This summary was automatically generated.
Information Disclosure
Critical
Resolved
Thanks
39 thanks received
Valid / Closed
Reputation
Rank
Private Program
Confidential
6/6
152
-
Testimonials
When asked about working with avinash_ on a vulnerability submission, a private team said...
"I'm HackerOne's CISO and Chief Hacking Officer. avinash_ reported a really interesting and unusual issue to us. It required careful research and testing on their behalf, and they delivered spectacularly. We are very grateful because tooling will never a find an issue like this. Having hackers like avinash_ on our side makes us all safer!"
Some time ago