TCH VI Viperblitzz · InfoSec Write-ups How I Found a Data Deletion Bypass via Subdomain Synchronization This is what I did after my lunch break and immediately got enough cash to buy stuff in the premium store
SCI TCH BU BugWraith (Lokesh) I locked unlimited subdomains on a SaaS platform without even finishing registration — and the… A ghost tenant, a broken registration flow, and a permanently blocked namespace. Welcome to SaaS logic bugs