Skip to content
View Humaira924's full-sized avatar

Block or report Humaira924

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Humaira924/README.md

✨ Hi, I'm Humaira Akram | humaira924

πŸ” Security Researcher | Bug Hunter | Azure Cloud ☁️

πŸ† Featured Finding - Critical 10.0

GHSA-j7ww-2w32-2mch - Inclusion of Functionality from Untrusted Control Sphere in ChatGPT-Next-Web Vercel Token Leak via pull_request_target -> Full Account Takeover possible | Patched: v2.15.3 πŸ”— [Official GitHub Advisory Link]GHSA-j7ww-2w32-2mch - VERCEL_TOKEN Leak - CVSS 10.0 πŸ’– Founder: bugbounty-learning-hub - Free for Students


πŸ”₯ Featured Finding - Critical

VERCEL_TOKEN Leak β†’ Full Vercel Account Takeover was possible

  • Impact: Critical | Status: βœ… Fixed after my report

πŸ“š My Work

@Humaira924's activity is private