⤷ Title: API2–2023: Broken Authentication
════════════════════════
𐀪 Author: Gamuchirai
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 13:00:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #security #passwords #broken_authentication #api
════════════════════════
𐀪 Author: Gamuchirai
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 13:00:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #security #passwords #broken_authentication #api
Medium
API2–2023: Broken Authentication
Broken Authentication is a vulnerability that can happen when an application does not properly handle the different parts of…
⤷ Title: One Invitation, Three Vulnerabilities: Breaking RBAC Across Two Applications
════════════════════════
𐀪 Author: OWL
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 03:52:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #pentesting #broken_access_control
════════════════════════
𐀪 Author: OWL
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 03:52:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #pentesting #broken_access_control
Medium
One Invitation, Three Vulnerabilities: Breaking RBAC Across Two Applications
Introduction
⤷ Title: Restoring Permanently Deleted Projects via IDOR
════════════════════════
𐀪 Author: Abdulrahman Reda
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 19:00:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #privilege_escalation #broken_access_control #idor
════════════════════════
𐀪 Author: Abdulrahman Reda
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 19:00:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #privilege_escalation #broken_access_control #idor
Medium
Restoring Permanently Deleted Projects via IDOR
Hello everyone,
⤷ Title: Niyə Broken Access Control hələdə OWASP TOP 10-un zirvəsindədir?️
════════════════════════
𐀪 Author: Vusal Ehmedov
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 21:28:38 GMT
════════════════════════
⌗ Tags: #information_security #owasp_top_10 #penetration_testing #cybersecurity #broken_access_control
════════════════════════
𐀪 Author: Vusal Ehmedov
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 21:28:38 GMT
════════════════════════
⌗ Tags: #information_security #owasp_top_10 #penetration_testing #cybersecurity #broken_access_control
⤷ Title: How a Viewer Role Snaked into Financial Records
════════════════════════
𐀪 Author: brbr0s
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 14:19:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bug_bounty_writeup #cybersecurity #broken_access_control
════════════════════════
𐀪 Author: brbr0s
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 14:19:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bug_bounty_writeup #cybersecurity #broken_access_control
Medium
How a Viewer Role Snaked into Financial Records
How an Easily Overlooked Button Led to Unauthorized Access to Users’ PII & Financial Data ($X,XXX)
⤷ Title: ️ 6 IDORs, 1 Root Cause: The “Duplicate” Saga of a FinTech API
════════════════════════
𐀪 Author: 0x_specter
════════════════════════
ⴵ Time: Sat, 05 Sep 2026 14:26:41 GMT
════════════════════════
⌗ Tags: #idor #bug_bounty #fintech #broken_access_control #cybersecurity
════════════════════════
𐀪 Author: 0x_specter
════════════════════════
ⴵ Time: Sat, 05 Sep 2026 14:26:41 GMT
════════════════════════
⌗ Tags: #idor #bug_bounty #fintech #broken_access_control #cybersecurity
⤷ Title: I Found a Hidden Signup Page… and Chained 3 Bugs to Become a Super Admin ($5,000–$10,000)
════════════════════════
𐀪 Author: Abin
════════════════════════
ⴵ Time: Sat, 05 Sep 2026 16:18:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #ethical_hacking #web_penetration_testing #broken_access_control
════════════════════════
𐀪 Author: Abin
════════════════════════
ⴵ Time: Sat, 05 Sep 2026 16:18:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #ethical_hacking #web_penetration_testing #broken_access_control
Medium
I Found a Hidden Signup Page… and Chained 3 Bugs to Become a Super Admin
Impact — Critical
⤷ Title: My First Paid Bug Bounty: A Broken Access Control Vulnerability
════════════════════════
𐀪 Author: OWL
════════════════════════
ⴵ Time: Wed, 09 Sep 2026 08:44:53 GMT
════════════════════════
⌗ Tags: #bug_bounty #broken_access_control #bug_bounty_writeup #hacking #cybersecurity
════════════════════════
𐀪 Author: OWL
════════════════════════
ⴵ Time: Wed, 09 Sep 2026 08:44:53 GMT
════════════════════════
⌗ Tags: #bug_bounty #broken_access_control #bug_bounty_writeup #hacking #cybersecurity
Medium
My First Paid Bug Bounty: A Broken Access Control Vulnerability
Introduction
⤷ Title: How I Got Regular Users to Bypass Admin Approval and Accept Live Shares (Broken Access Control) —…
════════════════════════
𐀪 Author: Tonmoydatta
════════════════════════
ⴵ Time: Thu, 10 Sep 2026 05:15:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #broken_access_control #cybersecurity
════════════════════════
𐀪 Author: Tonmoydatta
════════════════════════
ⴵ Time: Thu, 10 Sep 2026 05:15:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #broken_access_control #cybersecurity
Medium
How I Got Regular Users to Bypass Admin Approval and Accept Live Shares (Broken Access Control) —…
A writeup of a Broken Access Control / Privilege Escalation bug I found and got rewarded for. Target is referred to as `redacted.com` since…
⤷ Title: The Codebase Told Me It Was Sensitive. They Shipped It Publicly Anyway.
════════════════════════
𐀪 Author: 0x_specter
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 17:51:01 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty #cybersecurity #broken_access_control #infosec
════════════════════════
𐀪 Author: 0x_specter
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 17:51:01 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty #cybersecurity #broken_access_control #infosec
Medium
The Codebase Told Me It Was Sensitive. They Shipped It Publicly Anyway.
Sometimes the most convincing proof that a leak matters isn’t your own argument — it’s the target’s own code, contradicting itself.