Predictable Voucher Identifier Enumeration in Cibus (Victory Integration)28 January 2026·6 minsSecurity Research Enumeration Business Logic Supply Chain Web Security
The Trust Fall: Bypassing a City-Wide Payment Ecosystem12 January 2026·8 minsSecurity Research Business Logic Phishing Web Security
Breaking the Paywall: How a 'Lazy' Search Implementation Compromised a Paywall23 March 2025·5 minsSecurity Research Broken Access Control Business Logic Enumeration Web Security
The 1-Shekel Ticket: Broken Access Control, Mass PII Exposure, and Price Manipulation in a Concert Ticketing Platform17 September 2024·4 minsSecurity Research Broken Access Control PII Exposure Business Logic Web Security