Mars · Report #1851886
Bug Report #23JAN135 (subdomain takeover via shopify )
Validstatus
highseverity
50upvotes
2 Sept 2025disclosed
Summary
The researcher kuriyama discovered a subdomain takeover vulnerability affecting ██████████, which was pointing to an unclaimed Shopify instance. The researcher successfully demonstrated the takeover by claiming the subdomain and setting up a proof-of-concept storefront.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.