CVE-2025-14812: Zero-Click Address Bar Spoofing in Arc Browser iOS
Assalamualaikum, my name is Syarif Muhammad Sajjad, also known as syarif07 on HackerOne. In this writeup, I’ll walk through one of my findings that was assigned CVE-2025-14812, a high-severity vulnera
![[Bug Bounty] Race Condition: Redeeming Single-Use Coupon Multiple Times](/_next/image?url=https%3A%2F%2Fcdn.hashnode.com%2Fres%2Fhashnode%2Fimage%2Fupload%2Fv1770116456998%2F629ff44d-4a0a-4445-91bf-c37d3e84c104.jpeg&w=3840&q=75)



![[Chromium VRP] Bypass :// Characters on Filename lead to File Origin Spoofing](/_next/image?url=https%3A%2F%2Fcdn.hashnode.com%2Fres%2Fhashnode%2Fimage%2Fupload%2Fv1748774032002%2F56dda12e-036b-4464-bad7-11ab8ba77925.png&w=3840&q=75)