I was able to take over an admin account which made me able to put RCE, XSS and more exploits to the website.

open redirect alibaba full detailed report

Here's I was able to take over any user's account in a website. I have shared detailed information about it.

Here's how I hacked so many accounts with in few hours.

I found a vulnerability by which i could upload any file and send the to other user. It could also be script files and with this method I could also share porn, violence, illegal graphics/video/image without getting it filtered or removed

Major vulnerability in WoWonder that allows user to download any server files.

I found some serious vulnerability in Alibaba and Aliexpress website.