> For the complete documentation index, see [llms.txt](https://enderphan.kubertu.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://enderphan.kubertu.com/security-reports/untitled.md).

# Web Apps

### Feb 19, 2019

Cache is used for capturing QR code ==> false. This is a critical bug found in <https://github.com/LazarSoft/jsqrcode>

### &#x20;Oct 10, 2016

Company: FPT Telecom&#x20;

Type: Stored XSS

POC

{% embed url="<https://www.youtube.com/watch?v=XR0iN_7bsEk>" %}

### &#x20;May 9, 2017

Company: Playtech.ee&#x20;

Type: Bling SQL injection

POC

{% embed url="<https://www.youtube.com/watch?v=S2V1fOgP2bc>" %}

### Oct 10, 2016

Company: OIS.ee Study system

Type: XSS

POC

{% embed url="<https://www.youtube.com/watch?v=yamn18uC1Ng>" %}