@michielprins@ilhan_mercan A couple of days ago I saw these values on Medium and High severity submissions but I got confused when I saw both of them turns to n/a but the Critical severity was n/a as it is.
@dorkipty@ElS1carius@ElS1carius Congrats bro 🔥, am wondering does this endpoint was already used by the target through the normal requests or you fuzzed the parameter names and stuff like that to reach to the parameter name that called ‘filename’? Am curious to know, congrats again man! 😉🔥
@haxor31337@bxmbn Exactly, also I think it depends on the vulnerabilities too, for example if most of your bugs are BACs and IDORs and Privilege Escalation bugs then probably it’s a 50% Luck I agree with him since most of the time it’s the developer’s fault in those cases.