5tfn.bsky.social
@5tfn.bsky.social
host header injection + validation bypass because the regex is not anchored to the end with $. you can also spam random people with emails. but the biggest issue is that it's written in javscript.
February 18, 2025 at 6:55 PM
mass assignment?
February 3, 2025 at 12:07 PM