{"researcher":{"id":"39199be7-2e82-418e-9032-b3843817a14f","identityUuid":"723ccc83-efde-43ff-b35b-91a86ccb6214","avatar":"https://profiles.bugcrowdusercontent.com/avatars/5094c04e93c162b50701a43b68d835e9/normal_PicsArt_02-07-05.07.43.jpg","banner_image":"https://profiles.bugcrowdusercontent.com/banners/39199be7-2e82-418e-9032-b3843817a14f/preview_1_.jpg","username":"arthbajpai277","rank":"66th","accent_color":"","accuracy":"96.3%","biography":"Hey , My Name is Arth Bajpai, and I'm a security researcher from Lucknow, India. Started Bug hunting a year ago (2 Jan 2020), With No plans and knowledge about this field and for the first 5-6 months it felt like I'm doing it forcefully , Now it's my favorite or better to say only habit, Still learning day by day and really enjoying this field :) Love Hunting Private programs on bugcrowd Qualifications and Certificates : 1) BCA( Bachelor of Computer Applications) 2) CEH ( Certified Ethical Hacking) 3) M.Sc (Cyber Security) Planning to Start my PhD in cyber security Regards Arth Bajpai ","verified":true,"country":"India","country_flag":"🇮🇳","total_points":6209,"priority_percentile_charts":{"polar_chart":"PHN2ZyB2aWV3Qm94PSIwIC0yIDEyMC4wIDEyMC4wIiB3aWR0aD0iMTAwJSIg aGVpZ2h0PSIxMDAlIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9z dmciPgoKPHBvbHlnb24gcG9pbnRzPSI2MC4wMDAwMDAwMDAwMDAwMSwwLjAg MTE3LjA2MzM5MDk3NzcwOTIyLDQxLjQ1ODk4MDMzNzUwMzE2IDk1LjI2NzEx NTEzNzU0ODM5LDEwOC41NDEwMTk2NjI0OTY4NSAyNC43MzI4ODQ4NjI0NTE2 MiwxMDguNTQxMDE5NjYyNDk2ODUgMi45MzY2MDkwMjIyOTA3ODE1LDQxLjQ1 ODk4MDMzNzUwMzE2NCIgZmlsbD0iI2ViZWJlYiIgc3Ryb2tlPSJyZ2JhKDAs IDAsIDAsIDAuMSkiLz4KPHBvbHlnb24gcG9pbnRzPSI2MC4wMDAwMDAwMDAw MDAwMDM2MDA0NjE1ODk0OTMyMTg0MDgsMS4yIDExNS45MjIxMjMxNTgxNTUw MjU4LDQxLjgyOTgwMDczMDc1MzA5Mjg4IDYwLjAwMDAwMDAwMDAwMDAxLDYw LjAiIGZpbGw9IiNmZjY5MDAiLz4KPHBvbHlnb24gcG9pbnRzPSIxMTUuOTIy MTIzMTU4MTU1MDI1OCw0MS44Mjk4MDA3MzA3NTMwOTI4OCA5NC41NjE3NzI4 MzQ3OTc0MTgyOCwxMDcuNTcwMTk5MjY5MjQ2OTEzIDYwLjAwMDAwMDAwMDAw MDAxLDYwLjAiIGZpbGw9IiNmMGFkNGUiLz4KPHBvbHlnb24gcG9pbnRzPSI5 NC45MTQ0NDM5ODYxNzI5MDIxNCwxMDguMDU1NjA5NDY1ODcxODgxNSAyNS4w ODU1NTYwMTM4MjcxMDM4LDEwOC4wNTU2MDk0NjU4NzE4ODE1IDYwLjAwMDAw MDAwMDAwMDAxLDYwLjAiIGZpbGw9IiM1ZWFlMDAiLz4KPHBvbHlnb24gcG9p bnRzPSIyNS4wODU1NTYwMTM4MjcxMDM4LDEwOC4wNTU2MDk0NjU4NzE4ODE1 IDMuNTA3MjQyOTMyMDY3ODc2MTYsNDEuNjQ0MzkwNTM0MTI4MTMwMzggNjAu MDAwMDAwMDAwMDAwMDEsNjAuMCIgZmlsbD0iIzAyNzhiOCIvPgo8cG9seWdv biBwb2ludHM9IjYuMzYwNDEyNDgwOTUzMzM2OTYsNDIuNTcxNDQxNTE3MjUy OTcyMjggNTkuOTk5OTk5OTk5OTk5OTg5NjM5NDg4MDc5MjEzMzk2NDQsMy42 IDYwLjAwMDAwMDAwMDAwMDAxLDYwLjAiIGZpbGw9IiNkMTM1MzUiLz4KPHBv bHlnb24gcG9pbnRzPSI2MC4wLDE1LjAgMTAyLjc5NzU0MzIzMzI4MTkxLDQ2 LjA5NDIzNTI1MzEyNzM2NiA4Ni40NTAzMzYzNTMxNjEyOSw5Ni40MDU3NjQ3 NDY4NzI2MyAzMy41NDk2NjM2NDY4Mzg3MSw5Ni40MDU3NjQ3NDY4NzI2MyAx Ny4yMDI0NTY3NjY3MTgwODYsNDYuMDk0MjM1MjUzMTI3MzciIGZpbGw9InJn YmEoMjU1LCAyNTUsIDI1NSwgMCkiIHN0cm9rZT0icmdiYSgwLCAwLCAwLCAw LjEpIi8+Cjxwb2x5Z29uIHBvaW50cz0iNjAuMCwzMC4wIDg4LjUzMTY5NTQ4 ODg1NDYxLDUwLjcyOTQ5MDE2ODc1MTU4IDc3LjYzMzU1NzU2ODc3NDIsODQu MjcwNTA5ODMxMjQ4NDMgNDIuMzY2NDQyNDMxMjI1ODA2LDg0LjI3MDUwOTgz MTI0ODQzIDMxLjQ2ODMwNDUxMTE0NTM5LDUwLjcyOTQ5MDE2ODc1MTU4IiBm aWxsPSJyZ2JhKDI1NSwgMjU1LCAyNTUsIDApIiBzdHJva2U9InJnYmEoMCwg MCwgMCwgMC4xKSIvPgo8cG9seWdvbiBwb2ludHM9IjYwLjAsNDUuMCA3NC4y NjU4NDc3NDQ0MjczLDU1LjM2NDc0NTA4NDM3NTc5IDY4LjgxNjc3ODc4NDM4 NzEsNzIuMTM1MjU0OTE1NjI0MjIgNTEuMTgzMjIxMjE1NjEyOSw3Mi4xMzUy NTQ5MTU2MjQyMiA0NS43MzQxNTIyNTU1NzI2OTUsNTUuMzY0NzQ1MDg0Mzc1 NzkiIGZpbGw9InJnYmEoMjU1LCAyNTUsIDI1NSwgMCkiIHN0cm9rZT0icmdi YSgwLCAwLCAwLCAwLjEpIi8+Cjwvc3ZnPgo= ","bar_chart_percentiles":[{"label":"P1 - 94th","value":"94"},{"label":"P2 - 98th","value":"98"},{"label":"P3 - 98th","value":"98"},{"label":"P4 - 99th","value":"99"},{"label":"P5 - 99th","value":"99"}],"bar_chart_label":"All-time"},"priority_percentile_90_day_charts":null,"website":"","default_avatar":false,"biography_html":"

Hey , My Name is Arth Bajpai, and I'm a security researcher from Lucknow, India. Started Bug hunting a year ago (2 Jan 2020), With No plans and knowledge about this field and for the first 5-6 months it felt like I'm doing it forcefully , Now it's my favorite or better to say only habit,
Still learning day by day and really enjoying this field :)

Love Hunting Private programs on bugcrowd

Qualifications and Certificates :
1) BCA( Bachelor of Computer Applications)
2) CEH ( Certified Ethical Hacking)
3) M.Sc (Cyber Security)

Planning to Start my PhD in cyber security

Regards
Arth Bajpai

","external_links":[{"name":"twitter","label":"Twitter","url":"https://twitter.com/arth_bajpai"},{"name":"linkedin","label":"Linkedin","url":"https://www.linkedin.com/in/arth-bajpai-6699681b3/"},{"name":"website","label":"Website","url":null}],"connected_applications":[{"id":"626f1b71-b073-42a5-9afe-08577362f47a","provider":"github","profile_info":{"user_id":59727402,"profile_url":"https://github.com/arthbajpai"},"tooltip_info":"GitHub - arthbajpai"}],"profile_public":true,"researcherFriendsUrl":"/settings/researcher_friends","researcherFriendedUrl":"/settings/researcher_friends/friended","researcherBlockerUrl":"/settings/researcher_blocked_users"},"crowdStreamPreviewData":[{"logo_url":"https://logos.bugcrowdusercontent.com/logos/9cbb/3d6c/8a2f4ae1/08821bdd27acd21bbdda328e9ae7b939_3e77fd82e5fb782e4730615b2eccb53a_unnamed.png","logo_color":"BB0F23","engagement_name":"Pinterest","engagement_code":"pinterest","engagement_in_progress":true,"engagement_path":"/engagements/pinterest","visibility_public":true,"researcher_username":"arthbajpai277","researcher_profile_path":"/arthbajpai277","crowdstream_name_visible":false,"disclosure_report_url":"/disclosures/e0e71bd1-789b-4304-be0e-a9bb4e23338e/multiple-privilege-escalations-using-a-low-privileged-user","title":"Multiple privilege escalations using a low privileged user ","disclosed_at":"23 Feb 2021","id":"364baf4c-6041-428f-ac90-825925dfd9f4","disclosed":true,"priority":null,"substate":"resolved","created_at":"2020-07-25T10:22:29.279Z","accepted_at":"11 Aug 2020","claimed_at":null,"closed_at":"2020-11-01T22:39:46.953Z","target":"*.pinterest.com Web Apps","is_pinned":true,"submission_state_text":"Submission accepted on target: *.pinterest.com Web Apps","submission_state_date_text":"Disclosed on 23 Feb 2021"},{"visibility_public":true,"researcher_username":"arthbajpai277","researcher_profile_path":"/arthbajpai277","crowdstream_name_visible":false,"disclosure_report_url":"/disclosures/ffe37a89-7f51-412a-8071-2ce6b08cba84/authentication-bypass-leads-to-unauthenticated-use-of-money-and-group-all-actions-including-admin-removal","title":"Authentication Bypass leads to Unauthenticated Use of Money and group all actions( Including Admin Removal)","disclosed_at":"11 Aug 2021","id":"579c0873-fd66-4fed-8e6f-34060dc16483","disclosed":true,"priority":1,"substate":"resolved","created_at":"2021-05-25T20:35:59.149Z","accepted_at":"9 Jun 2021","claimed_at":null,"closed_at":"2021-09-01T14:54:04.659Z","target":"https://sandbox-manage.rewardsgenius.com/","is_pinned":true,"submission_state_text":"Submission accepted on target: https://sandbox-manage.rewardsgenius.com/","submission_state_date_text":"Disclosed on 11 Aug 2021"},{"logo_url":"https://logos.bugcrowdusercontent.com/logos/bd8f/2e21/01c0cdd0/07159d2e89527f5f69b91b7be3529d76_ArrowElectronics_logo.jpeg","logo_color":"fff","engagement_name":"Arrow Electronics VDP","engagement_code":"arrow-electronics-vdp","engagement_in_progress":true,"engagement_path":"/engagements/arrow-electronics-vdp","visibility_public":true,"researcher_username":"arthbajpai277","researcher_profile_path":"/arthbajpai277","crowdstream_name_visible":false,"disclosure_report_url":"/disclosures/a3a59311-0fb6-45be-b1fb-69c4f158f9ec/https-www-verical-com-account-account-settings-csrf-leads-to-name-change","title":"[https://www.verical.com/account/account-settings] CSRF leads to name change","disclosed_at":"9 Sep 2021","id":"a659617f-455e-4623-ad71-7e8e9faced85","disclosed":true,"priority":3,"substate":"resolved","created_at":"2021-01-16T18:49:42.070Z","accepted_at":"25 Jan 2021","claimed_at":null,"closed_at":"2021-06-16T21:43:14.125Z","target":"*.verical.com","is_pinned":false,"submission_state_text":"Submission accepted on target: *.verical.com","submission_state_date_text":"Disclosed on 9 Sep 2021"},{"logo_url":"https://logos.bugcrowdusercontent.com/logos/9cbb/3d6c/8a2f4ae1/08821bdd27acd21bbdda328e9ae7b939_3e77fd82e5fb782e4730615b2eccb53a_unnamed.png","logo_color":"BB0F23","engagement_name":"Pinterest","engagement_code":"pinterest","engagement_in_progress":true,"engagement_path":"/engagements/pinterest","visibility_public":true,"researcher_username":"arthbajpai277","researcher_profile_path":"/arthbajpai277","crowdstream_name_visible":false,"disclosure_report_url":"/disclosures/03224a0c-6255-47a1-9b69-2cdb3f00e149/email-verification-bypass-using-race-condtion","title":"Email Verification Bypass using Race Condtion","disclosed_at":"25 Aug 2021","id":"f2159197-2f9c-4e08-8ff4-80751d47f4bf","disclosed":true,"priority":4,"substate":"resolved","created_at":"2021-08-12T09:25:42.944Z","accepted_at":"19 Aug 2021","claimed_at":null,"closed_at":"2021-08-25T19:15:10.740Z","target":"*.pinterest.com Web Apps","is_pinned":false,"submission_state_text":"Submission accepted on target: *.pinterest.com Web Apps","submission_state_date_text":"Disclosed on 25 Aug 2021"}],"avatarUploadUrl":"/settings/avatar","bannerUploadUrl":"/researcher_profile/banners","crowdStreamDataUrl":"/researcher_profile/crowdstream/39199be7-2e82-418e-9032-b3843817a14f","achievementsDataUrl":"/researcher_profile/achievements/39199be7-2e82-418e-9032-b3843817a14f","statisticsDataUrl":"/researcher_profile/statistics/39199be7-2e82-418e-9032-b3843817a14f","profileSettingsUrl":null,"bioUpdateUrl":"/researcher_profile/users","publicView":true,"dateRanges":{"All time":{"name":"All time","start_date":"2020-01-04","end_date":"2025-03-19","active":false},"Year-to-date":{"name":"Year-to-date","start_date":"2025-01-01","end_date":"2025-03-19","active":false},"Last 90 days":{"name":"Last 90 days","start_date":"2024-12-19","end_date":"2025-03-19","active":false},"Current month":{"name":"Current month","start_date":"2025-03-01","end_date":"2025-03-19","active":false}},"showAchievements":true,"showCrowdstream":true,"blankStateProps":{"hasValidSubmissions":true,"hasPendingSubmissions":false},"researcherPortfolioProps":{"connectedApplications":[{"id":"626f1b71-b073-42a5-9afe-08577362f47a","user_display_name":"arthbajpai","updated_at":"2021-02-10T09:27:26.904Z","url":"/connected_applications/626f1b71-b073-42a5-9afe-08577362f47a","provider_key":"github","provider_name":"GitHub","provider_type":"Developer"}],"connectableApplications":{"github":{"provider":"github","provider_display_name":"GitHub","authorize_url":"/connected_applications/github/authorize","authorization_type":"oauth","application_type":"Developer"},"stackoverflow":{"provider":"stackoverflow","provider_display_name":"Stack Overflow","authorize_url":"/connected_applications/stackoverflow/authorize","authorization_type":"oauth","application_type":"Developer"},"pentesterlab":{"provider":"pentesterlab","provider_display_name":"PentesterLab","authorize_url":"/connected_applications","authorization_type":"pentesterlab","application_type":"Infosec"}},"profileWidgetsPath":"/profile_widgets","pentesterWidgetBatchUpdatePath":"/profile_widgets/batch_update_pentesterlab","portfolioAccountsPath":"/settings/profile/portfolio_accounts"},"csrfToken":"8TAqvd7JD_zk6pdVn7_aNk_RmpMmSU2jopTsGlIBL124LpsLZFAH7JQOoCyjDaYv_RPAhULJVo1cX1YDXHBbeA","preferred_timezone":"Etc/UTC"}