> For the complete documentation index, see [llms.txt](https://blog.p1k4chu.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.p1k4chu.com/security-research/web-and-mobile-app-sec.md).

# Web & Mobile App Sec

- [\[CVE-2015-2300\] ENL-Newsletter CSRF Full Disclosure](https://blog.p1k4chu.com/security-research/web-and-mobile-app-sec/cve-2015-2300-enl-newsletter-csrf-full-disclosure.md)
- [Yandex Mobile App vulnerable to Insecure Data storage](https://blog.p1k4chu.com/security-research/web-and-mobile-app-sec/yandex-mobile-app-vulnerable-to-insecure-data-storage.md)
- [Bug on paypal worth 1000$](https://blog.p1k4chu.com/security-research/web-and-mobile-app-sec/bug-on-paypal-worth-1000usd.md)
- [Session fixation bug on coinbase.](https://blog.p1k4chu.com/security-research/web-and-mobile-app-sec/session-fixation-bug-on-coinbase..md)
- [CyanogenMod (In)Secure Folder Lock !](https://blog.p1k4chu.com/security-research/web-and-mobile-app-sec/cyanogenmod-in-secure-folder-lock.md)