Seven PayPal Bugs, Zero Bounties
A 2014 run through PayPal’s bug bounty scope: seven confirmed issues across paypal.com, financing.paypal.com, apps.paypal.com and the paypal-*.com family, all closed as duplicate or invalid.
Privilege escalation
SQL injection to root on a 2013 lab box
Chaining a login-form SQL injection through sqlmap’s –os-shell into a Linux 2.6.32 local root exploit to go from the ’nobody’ user to full control of the server.