Swipe, Match… Leak: Unauthenticated Phone-Number Exposure in the InPerson Dating App25 August 2026·8 minsSecurity Research Broken Access Control PII Exposure Web Security
The Ghost in the Tenant: Chaining SVG UI Redressing and Persistent Authorization for Stealth Account Takeover5 February 2026·4 minsSecurity Research UI Redressing Broken Access Control Web Security
Breaking the Paywall: How a 'Lazy' Search Implementation Compromised a Paywall23 March 2025·5 minsSecurity Research Broken Access Control Business Logic Enumeration Web Security
The 1-Shekel Ticket: Broken Access Control, Mass PII Exposure, and Price Manipulation in a Concert Ticketing Platform17 September 2024·4 minsSecurity Research Broken Access Control PII Exposure Business Logic Web Security
