Swipe, Match… Leak: Unauthenticated Phone-Number Exposure in the InPerson Dating App25 August 2026·8 minsSecurity Research Broken Access Control PII Exposure Web Security
The Ghost in the Tenant: Chaining SVG UI Redressing and Persistent Authorization for Stealth Account Takeover5 February 2026·4 minsSecurity Research UI Redressing Broken Access Control Web Security
Predictable Voucher Identifier Enumeration in Cibus (Victory Integration)28 January 2026·6 minsSecurity Research Enumeration Business Logic Supply Chain Web Security
Exploiting Layout Logic for DOM-Based XSS in react-show-more-text20 January 2026·6 minsSecurity Research XSS Supply Chain Web Security
The Trust Fall: Bypassing a City-Wide Payment Ecosystem12 January 2026·8 minsSecurity Research Business Logic Phishing Web Security
How an Unpatched XSS vulnerability in a React Library Exposed Corporate Data, Employee Credentials, and Financial Assets28 December 2025·10 minsSecurity Research XSS Supply Chain Data Exfiltration Web Security
Breaking the Paywall: How a 'Lazy' Search Implementation Compromised a Paywall23 March 2025·5 minsSecurity Research Broken Access Control Business Logic Enumeration Web Security
The 1-Shekel Ticket: Broken Access Control, Mass PII Exposure, and Price Manipulation in a Concert Ticketing Platform17 September 2024·4 minsSecurity Research Broken Access Control PII Exposure Business Logic Web Security
Reverse Engineering a 3D Unity Web App to Win a Chocolate Contest21 July 2024·8 minsSecurity Research Reverse Engineering Game Hacking Web Security
