This is my blog wherein I was able to exploit some popular websites. I contacted all of the administrators of their websites but refused to acknowledge. As a website developer, security should be on top of the development cycle and as a user, once a particular website does not take good care of your data, you should be the one reporting this.
http://vulnerablewebsite.blogspot.com/