Swipe, Match… Leak: Unauthenticated Phone-Number Exposure in the InPerson Dating App25 August 2026·8 minsSecurity Research IDOR Broken Access Control PII Exposure Privacy Web Security Responsible Disclosure
The 1-Shekel Ticket: Broken Access Control, Mass PII Exposure, and Price Manipulation in a Concert Ticketing Platform17 September 2024·4 minsSecurity Research IDOR Broken Access Control Business Logic PII Exposure Web Security