Updated with the latest blog posts

README.md

@@ -2,23 +2,23 @@
 This repository contains Bug Bounty writeups
 
 <!-- BLOG-POST-LIST:START -->
- - 💯December 9, 2024 - [NASA P3 Google Dorking](https://cybersecuritywriteups.com/nasa-p3-google-dorking-6779970b6f03?source=rss------bug_bounty-5) 
+ - 💯December 10, 2024 - [$500 Bypassing Cloudflare WAF to Achieve XSS](https://medium.com/@kumawatabhijeet2002/500-bypassing-cloudflare-waf-to-achieve-xss-f3b9c4acb702?source=rss------bug_bounty-5) 
 
- - 💯December 9, 2024 - [Vote Manipulation &amp; Debug Exposure, Another Interesting Finding…](https://medium.com/@josuofficial327/vote-manipulation-debug-exposure-another-interesting-finding-ec31f8cb939c?source=rss------bug_bounty-5) 
+ - 💯December 10, 2024 - [HackerOne 香港汇丰接收赏金](https://medium.com/@dem0ns/hackerone-%E9%A6%99%E6%B8%AF%E6%B1%87%E4%B8%B0%E6%8E%A5%E6%94%B6%E8%B5%8F%E9%87%91-353356389bc9?source=rss------bug_bounty-5) 
 
- - 💯December 8, 2024 - [How I Test for Cross-Site Scripting](https://osintteam.blog/how-i-test-for-cross-site-scripting-9262de5e949d?source=rss------bug_bounty-5) 
+ - 💯December 10, 2024 - [Email and home address disclosure using unauthenticated API endpoint worth $500](https://vijetareigns.medium.com/email-and-home-address-disclosure-using-unauthenticated-api-endpoint-worth-500-4a497ff0678c?source=rss------bug_bounty-5) 
 
- - 💯December 8, 2024 - [Mastering Subdomain Visualization: Using Aquatone for Effective Reconnaissanc](https://medium.com/@kalkumbe7745/mastering-subdomain-visualization-using-aquatone-for-effective-reconnaissanc-6409c7846c2c?source=rss------bug_bounty-5) 
+ - 💯December 10, 2024 - [Investigating a Linux Machine Security Breach Without Tools!](https://medium.com/@paritoshblogs/investigating-a-linux-machine-security-breach-without-tools-464e14bdeab0?source=rss------bug_bounty-5) 
 
- - 💯December 8, 2024 - [How I Found a Critical Vulnerability and Earned $4,000 in Bug Bounty Hunting](https://medium.com/@zack0x01_/how-i-found-a-critical-vulnerability-and-earned-4-000-in-bug-bounty-hunting-2ce4a1227fdc?source=rss------bug_bounty-5) 
+ - 💯December 10, 2024 - [Mastering JavaScript, Can It Make You an XSS Bug Hunter?](https://rendiero.medium.com/mastering-javascript-can-it-make-you-an-xss-bug-hunter-a0f0aaba0c6f?source=rss------bug_bounty-5) 
 
- - 💯December 8, 2024 - [Mastering Git Conflicts: A Developer’s Guide to Seamless Merges ️⚡](https://rajuhemanth456.medium.com/mastering-git-conflicts-a-developers-guide-to-seamless-merges-%EF%B8%8F-19718b819da0?source=rss------bug_bounty-5) 
+ - 💯December 9, 2024 - [1-Click Account Takeover &lpar;ATO&rpar; via CORS Misconfiguration](https://medium.com/@mohammed01550038865/1-click-account-takeover-ato-via-cors-misconfiguration-64dc26d24917?source=rss------bug_bounty-5) 
 
- - 💯December 8, 2024 - [Privilege Escalation via Impersonation Features feature](https://medium.com/@0x_xnum/privilege-escalation-via-impersonation-features-feature-c49cf3a3dc03?source=rss------bug_bounty-5) 
+ - 💯December 9, 2024 - [Server Security Misconfiguration: Misconfigured DNS — High-Impact Subdomain Takeover &lpar;P2&rpar;](https://medium.com/@mathewskuruvila32/server-security-misconfiguration-misconfigured-dns-high-impact-subdomain-takeover-p2-cb9e7ccadf2d?source=rss------bug_bounty-5) 
 
- - 💯December 8, 2024 - [Mastering Internet Scanning: How to Use ZMap and Censys for Ethical Hacking — Part 1](https://systemweakness.com/mastering-internet-scanning-how-to-use-zmap-and-censys-for-ethical-hacking-part-1-2ca54401e2e0?source=rss------bug_bounty-5) 
+ - 💯December 9, 2024 - [The HackerOne-Wayback Machine Saga: An Unofficial Vulnerability or Just Public Oversight?](https://huntrai.medium.com/the-hackerone-wayback-machine-saga-an-unofficial-vulnerability-or-just-public-oversight-22c1fb0112bb?source=rss------bug_bounty-5) 
 
- - 💯December 8, 2024 - [Unlocking Cybersecurity with Censys: A Guide to Ethical Hacking, Bug Bounties, and Pentesting —…](https://systemweakness.com/unlocking-cybersecurity-with-censys-a-guide-to-ethical-hacking-bug-bounties-and-pentesting-4e1c6e4358c3?source=rss------bug_bounty-5) 
+ - 💯December 9, 2024 - [How I Discovered a Critical Vulnerability in WhatsApp’s Admin System](https://huntrai.medium.com/how-i-discovered-a-critical-vulnerability-in-whatsapps-admin-system-ce0a3f2bbcb2?source=rss------bug_bounty-5) 
 
- - 💯December 8, 2024 - [Russia’s ‘BlueAlpha’ APT Hides in Cloudflare Tunnels](https://medium.com/@wiretor/russias-bluealpha-apt-hides-in-cloudflare-tunnels-7d7372615241?source=rss------bug_bounty-5) 
+ - 💯December 9, 2024 - [Exposed Prometheus Server Endpoint](https://osintteam.blog/exposed-prometheus-server-endpoint-cfb8e82e441b?source=rss------bug_bounty-5) 
 <!-- BLOG-POST-LIST:END -->