PROTOCOL-LEVEL: Persistent UDP Amplification and Cache Poisoning via Alt-Svc Logic Flaw
HackerOnecurl2026-01-02
Web
High
BUG BOUNTY WRITEUPS
Web cache poisoning writeups
Getting a cache to store and serve your response to everyone else, plus cache deception for stealing private pages.
17 reports and writeups from 2024 to 2026. 5 carry a severity from the disclosing platform, 2 of them rated High or Critical. Last updated 2026-10-30.
Latest Web cache poisoning reports
Search and filter all writeupsURL Path Manipulation Enables Cache Poisoning of Amazon Affiliate Products in Shopify Linkpop
HackerOneShopify2025-08-14$500 bounty
Web
Low
DoS Vulnerability via Cache Poisoning on cdn.shopify.com and shopify-assets.shopifycdn.com
HackerOneShopify2025-06-04$3,800 bounty
Web
Medium
Denial of Access to Static Resources via Cache Poisoning on addons.allizom.org
HackerOneMozilla2025-01-08
Web
Low
Gotta cache 'em all: bending the rules of web cache exploitation
PortSwigger Research2024-08-08
Web
Not rated
Splitting the email atom: exploiting parsers to bypass access controls
PortSwigger Research2024-08-07
Web
Not rated
Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies
Researcher blogATS, Nginx, HAProxy2024-07-25
Web
Not rated
3 Easy cash via cache
Medium2024-07-01
Web
Not rated
Exploiting Cache Poisoning via Unkeyed Parameters and Headers in a Drupal Application
Medium2024-06-30
Web
Not rated
Next.js and cache poisoning: a quest for the black hole
GitHubVercel (NextJS)2024-06-24$5,000 bounty
Web
Not rated
Cross-Site Scripting via Web Cache Poisoning and WAF bypass
Medium2024-06-17
Web
Not rated
How a Single Vulnerability Can Bring Down the JavaScript Ecosystem
Researcher blogGitHub (npm)2024-06-03$500 bounty
Web, Source Code
Not rated
The Monsters in Your Build Cache – GitHub Actions Cache Poisoning
Researcher blogGoogle2024-05-06$1,000 bounty
Web, Source Code
Not rated
Docker Secret Disclosure via GitHub Actions Cache Poisoning
HackerOneLinux Foundation Decentralized Trust2024-04-20
Cloud, Source Code, Linux
High
Making desync attacks easy with TRACE
PortSwigger Research2024-03-19
Web
Not rated
Cache Deception Without Path Confusion
Researcher blog2024-02-16
Web
Not rated
ChatGPT Account Takeover - Wildcard Web Cache Deception
GitHubOpenAI (ChatGPT)2024-02-04$6,500 bounty
Web, AI
Not rated
Every entry links to the original report or article. Secure Hyperloop doesn't copy the content. Severity comes from the disclosing platform (HackerOne). Writeups without a platform rating show "Not rated". The index has 2,810 items in total.