Daily Bug Bounty Writeups by @Piyush Kumawat

This repository contains Bug Bounty writeups

• 💯July 19, 2026 - How a Simple Profile Setting Revealed Sensitive Credentials in a Bug Bounty Program

• 💯July 19, 2026 - How I Found a Race Condition in an Email Verification Feature

• 💯July 19, 2026 - When JPEGs Start Giving Orders: A Journey into Multi-modal Prompt Injection

• 💯July 19, 2026 - The Cursor Zero-Day That Sat Through 70 Versions

• 💯July 19, 2026 - Authentication Vulnerability

• 💯July 18, 2026 - Bug Bounty Pre-Recon Methodology: A Beginner’s Guide to Finding the Attack Surface

• 💯July 18, 2026 - When XSS Meets CSRF

• 💯July 18, 2026 - From Reflected XSS to Critical Bug Led to Sensitive Data Leakage

• 💯July 18, 2026 - 10 Ways to Encode an XSS Payload

• 💯July 18, 2026 - Don’t Trust the Token — The Art of JWT Attacks