⤷ Title: When null Became the OTP: Exploiting a Broken Password Reset Flow to Take Over an Admin Account
════════════════════════
𐀪 Author: Yeboahromeo
════════════════════════
ⴵ Time: Wed, 06 May 2026 21:33:44 GMT
════════════════════════
⌗ Tags: #penetration_testing #appsec #webapp_security #cybersecurity
════════════════════════
𐀪 Author: Yeboahromeo
════════════════════════
ⴵ Time: Wed, 06 May 2026 21:33:44 GMT
════════════════════════
⌗ Tags: #penetration_testing #appsec #webapp_security #cybersecurity
Medium
When null Became the OTP: Exploiting a Broken Password Reset Flow to Take Over an Admin Account
Authentication systems are supposed to protect users, especially privileged accounts like administrators. Among the most trusted security…
⤷ Title: How I Found Account Enumeration Hiding Across Two Endpoints
════════════════════════
𐀪 Author: Rahul Masal
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 20:11:16 GMT
════════════════════════
⌗ Tags: #web_application_security #webapp_security #bug_bounty #api_security #penetration_testing
════════════════════════
𐀪 Author: Rahul Masal
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 20:11:16 GMT
════════════════════════
⌗ Tags: #web_application_security #webapp_security #bug_bounty #api_security #penetration_testing
Medium
How I Found Account Enumeration on Two Endpoints of a Social Platform
How I Found Account Enumeration on Two Endpoints of a Social Platform A beginner-friendly security writeup | CWE-204 | Medium Severity What is Account Enumeration? Before we get into the findings …