πNew WriteupβοΈ
βββββββββββββββ
πDate: Thu, 16 Mar 2023 18:28:46 GMT
βββββββββββββββ
βοΈTitle: Privilege Escalation To View Sensitive Data Of Other User
βββββββββββββββ
πLink: https://medium.com/p/c4ad06c9472
βββββββββββββββ
Tags: #infosec #sensitive_data_exposure #vapt #authorization
βββββββββββββββ
πDate: Thu, 16 Mar 2023 18:28:46 GMT
βββββββββββββββ
βοΈTitle: Privilege Escalation To View Sensitive Data Of Other User
βββββββββββββββ
πLink: https://medium.com/p/c4ad06c9472
βββββββββββββββ
Tags: #infosec #sensitive_data_exposure #vapt #authorization
Medium
Privilege Escalation To View Sensitive Data Of Other User
Privilege escalation is a type of attack where an attacker exploits a vulnerability in a system or application to gain higher levels ofβ¦
πNew WriteupβοΈ
βββββββββββββββ
πDate: Thu, 05 Oct 2023 14:30:20 GMT
βββββββββββββββ
βοΈTitle: Understanding the Risks of Sensitive Data Exposure: A Lesson in Data Security
βββββββββββββββ
πLink: https://medium.com/p/1b66b08b803c
βββββββββββββββ
Tags: #data_breach #data_exposure #data_security #hacking #sensitive_data_exposure
βββββββββββββββ
πDate: Thu, 05 Oct 2023 14:30:20 GMT
βββββββββββββββ
βοΈTitle: Understanding the Risks of Sensitive Data Exposure: A Lesson in Data Security
βββββββββββββββ
πLink: https://medium.com/p/1b66b08b803c
βββββββββββββββ
Tags: #data_breach #data_exposure #data_security #hacking #sensitive_data_exposure
Medium
Understanding the Risks of Sensitive Data Exposure: A Lesson in Data Security
In todayβs digital age, sensitive data exposure has become a significant concern for individuals, businesses, and organizations alike. Theβ¦
β€· Title: How I Hacked An Overseas Education Consultancy Firm
ββββββββββββββββββββββββ
πͺ Author: Ansh Vaid
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 26 Dec 2024 08:01:45 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #sql_injection #vulnerability #sensitive_data_exposure #ethical_hacking
ββββββββββββββββββββββββ
πͺ Author: Ansh Vaid
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 26 Dec 2024 08:01:45 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #sql_injection #vulnerability #sensitive_data_exposure #ethical_hacking
Medium
How I Hacked An Overseas Education Consultancy Firm
The purpose of this blog is to share my bug hunting experience with cybersecurity enthusiasts and researchers, to provide them the insightsβ¦
β€· Title: Sensitive Data ExposuredβββPII Data Leak Via Account Registration Inquiry
ββββββββββββββββββββββββ
πͺ Author: kevstrs_
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 27 Dec 2024 15:34:31 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #pentesting #pii_data #api_security
ββββββββββββββββββββββββ
πͺ Author: kevstrs_
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 27 Dec 2024 15:34:31 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #pentesting #pii_data #api_security
Medium
Sensitive Data ExposuredβββPII Data Leak Via Account Registration Inquiry
What is Sensitive Data Exposure?
π1
β€· Title: Sensitive Information Disclosure in 5 minutes
ββββββββββββββββββββββββ
πͺ Author: Muhammad Haziqul Khair
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 29 Jan 2025 00:21:21 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #web_pentesting #reconnaissance #cybersecurity #bug_bounty
ββββββββββββββββββββββββ
πͺ Author: Muhammad Haziqul Khair
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 29 Jan 2025 00:21:21 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #web_pentesting #reconnaissance #cybersecurity #bug_bounty
Medium
Sensitive Information Disclosure in 5 minutes
In this article, Iβll walk you through a real bug bounty discovery where I discovered Sensitive information(employee CVs) in 5 minutesβ¦
β€· Title: Try Fuzzing Backup Files During Manual Pentesting
ββββββββββββββββββββββββ
πͺ Author: Just R
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 23 Feb 2025 21:36:27 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #bug_bounty_writeup #fuzzing #bug_hunting #penetration_testing
ββββββββββββββββββββββββ
πͺ Author: Just R
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 23 Feb 2025 21:36:27 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #bug_bounty_writeup #fuzzing #bug_hunting #penetration_testing
Medium
Try Fuzzing Backup Files During Manual Pentesting
Bappenas.
β€· Title: Fuzzing Backup File Path to Get Sensitive Data Exposure
ββββββββββββββββββββββββ
πͺ Author: Just R
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 23 Feb 2025 21:36:27 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #bug_bounty_writeup #fuzzing #bug_hunting #penetration_testing
ββββββββββββββββββββββββ
πͺ Author: Just R
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 23 Feb 2025 21:36:27 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #bug_bounty_writeup #fuzzing #bug_hunting #penetration_testing
Medium
Fuzzing Backup File Path to Get Sensitive Data Exposure
Bappenas.
β€· Title: Sensitive Data Exposure in Symfony: Fix It Fast
ββββββββββββββββββββββββ
πͺ Author: Pentest_Testing_Corp
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 20 Apr 2025 07:45:24 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #vulnerability #sensitive_data_exposure #symfony #penetration_testing
ββββββββββββββββββββββββ
πͺ Author: Pentest_Testing_Corp
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 20 Apr 2025 07:45:24 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #vulnerability #sensitive_data_exposure #symfony #penetration_testing
Medium
Sensitive Data Exposure in Symfony: Fix It Fast
In todayβs world of web applications, sensitive data exposure continues to be a top security concernβββespecially for Symfony developersβ¦
β€· Title: οΈ Sensitive Data Exposure via WP-JSON in WordPress
ββββββββββββββββββββββββ
πͺ Author: Noorsaper
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 29 May 2025 00:41:48 GMT
ββββββββββββββββββββββββ
β Tags: #rest_api #owasp #bug_bounty #sensitive_data_exposure #wordpress
ββββββββββββββββββββββββ
πͺ Author: Noorsaper
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 29 May 2025 00:41:48 GMT
ββββββββββββββββββββββββ
β Tags: #rest_api #owasp #bug_bounty #sensitive_data_exposure #wordpress
Medium
π΅οΈ Sensitive Data Exposure via WP-JSON in WordPress
The WordPress REST API exposes certain user information through public endpoints. Specifically, the endpoint: This information can aid attackers in further exploitation, such as brute force orβ¦
β€· Title: GraphQL Role Escalation and Data Exposure
ββββββββββββββββββββββββ
πͺ Author: Omer Mohsen
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 09 Jun 2025 22:10:40 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #security_testing #bug_bounty #graphql #web_application_security
ββββββββββββββββββββββββ
πͺ Author: Omer Mohsen
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 09 Jun 2025 22:10:40 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #security_testing #bug_bounty #graphql #web_application_security
Medium
GraphQL Role Escalation and Data Exposure
.Ψ¨Ψ³Ω
Ψ§ΩΩΩ Ψ§ΩΨ±ΨΩ
Ω Ψ§ΩΨ±ΨΩΩ
, Ψ§ΩΩΩΩ
Ψ΅ΩΩ ΩΨ³ΩΩ
ΩΨ²Ψ― ΩΨ¨Ψ§Ψ±Ω ΨΉΩΩ Ψ³ΩΨ―ΩΨ§ Ω
ΨΩ
Ψ― ΩΨΉΩΩ Ψ’ΩΩ ΩΨ΅ΨΨ¨Ω ΩΨ³ΩΩ
β€· Title: Accidental Exposure of Private GraphQL Fields
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 01 Jul 2025 02:00:34 GMT
ββββββββββββββββββββββββ
β Tags: #bug_bounty_tips #bug_bounty #graphql_vulnerability #sensitive_data_exposure #graphql_field_exposure
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 01 Jul 2025 02:00:34 GMT
ββββββββββββββββββββββββ
β Tags: #bug_bounty_tips #bug_bounty #graphql_vulnerability #sensitive_data_exposure #graphql_field_exposure
Medium
Accidental Exposure of Private GraphQL Fields
Discover how poorly secured GraphQL fields can expose sensitive data and allow unauthorized access βββ even admin accounts.
β€· Title: Accidental Exposure of Private GraphQL Fields
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 01 Jul 2025 11:59:11 GMT
ββββββββββββββββββββββββ
β Tags: #bug_bounty_tips #bug_bounty #graphql_vulnerability #sensitive_data_exposure #graphql_field_exposure
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 01 Jul 2025 11:59:11 GMT
ββββββββββββββββββββββββ
β Tags: #bug_bounty_tips #bug_bounty #graphql_vulnerability #sensitive_data_exposure #graphql_field_exposure
Medium
Accidental Exposure of Private GraphQL Fields
Discover how poorly secured GraphQL fields can expose sensitive data and allow unauthorized access βββ even admin accounts.
β€· Title: Sensitive Data Exposure in React: Fixes & Examples
ββββββββββββββββββββββββ
πͺ Author: Pentest_Testing_Corp
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 31 Aug 2025 10:50:04 GMT
ββββββββββββββββββββββββ
β Tags: #penetration_testing #sensitive_data_exposure #vulnerability #reactjs #cybersecurity
ββββββββββββββββββββββββ
πͺ Author: Pentest_Testing_Corp
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 31 Aug 2025 10:50:04 GMT
ββββββββββββββββββββββββ
β Tags: #penetration_testing #sensitive_data_exposure #vulnerability #reactjs #cybersecurity
Medium
Sensitive Data Exposure in React: Fixes & Examples
Why Sensitive Data Exposure Happens in React
β€· Title: Entities vs DTOs: Protecting Your API and Clients
ββββββββββββββββββββββββ
πͺ Author: Kites Software
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 01 Dec 2025 15:59:34 GMT
ββββββββββββββββββββββββ
β Tags: #api_security #dto #data_transfer_object #spring_boot_rest_api #sensitive_data_exposure
ββββββββββββββββββββββββ
πͺ Author: Kites Software
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 01 Dec 2025 15:59:34 GMT
ββββββββββββββββββββββββ
β Tags: #api_security #dto #data_transfer_object #spring_boot_rest_api #sensitive_data_exposure
Medium
Entities vs DTOs: Protecting Your API and Clients
Written by @MaiAbdelhameed, Software Engineer in the Couch Potatoes squad at Kites Software π₯
β€· Title: Fastest Way to Crawl JavaScript Files for Sensitive Data Exposure | The Best Bug Bounty Pipelineβ¦
ββββββββββββββββββββββββ
πͺ Author: Alham Rizvi
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 03 Jan 2026 08:29:51 GMT
ββββββββββββββββββββββββ
β Tags: #ethical_hacking #bug_hunting #bug_bounty_tips #sensitive_data_exposure #bug_bounty
ββββββββββββββββββββββββ
πͺ Author: Alham Rizvi
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 03 Jan 2026 08:29:51 GMT
ββββββββββββββββββββββββ
β Tags: #ethical_hacking #bug_hunting #bug_bounty_tips #sensitive_data_exposure #bug_bounty
Medium
Fastest Way to Crawl JavaScript Files for Sensitive Data Exposure | The Best Bug Bounty Pipeline for 2026
are we cooked fr gng
β€· Title: From CORS Misconfiguration to Sensitive Data Exposure
ββββββββββββββββββββββββ
πͺ Author: montaser mohsen
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 12 Mar 2026 18:40:08 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #bug_bounty_tips #web_security #cors #bug_bounty
ββββββββββββββββββββββββ
πͺ Author: montaser mohsen
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 12 Mar 2026 18:40:08 GMT
ββββββββββββββββββββββββ
β Tags: #sensitive_data_exposure #bug_bounty_tips #web_security #cors #bug_bounty
Medium
From CORS Misconfiguration to Sensitive Data Exposure
My name is Montaser Mohsen, and Iβm an independent security researcher and bug bounty hunter. I spend a large part of my time analyzing webβ¦
β€· Title: AI System Reconnaissance β TryHackMe Walkthrough
ββββββββββββββββββββββββ
πͺ Author: Rotimi Ishola
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 29 Apr 2026 06:38:52 GMT
ββββββββββββββββββββββββ
β Tags: #system_architecture #api_security #security_misconfiguration #ai_systems #sensitive_data_exposure
ββββββββββββββββββββββββ
πͺ Author: Rotimi Ishola
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 29 Apr 2026 06:38:52 GMT
ββββββββββββββββββββββββ
β Tags: #system_architecture #api_security #security_misconfiguration #ai_systems #sensitive_data_exposure
Medium
AI System Reconnaissance β TryHackMe Walkthrough
29.04.2026
β€· Title: Credentials Leaked in JS: Inspect Element, Then Exfiltrate
ββββββββββββββββββββββββ
πͺ Author: xploiterr
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 25 May 2026 18:31:00 GMT
ββββββββββββββββββββββββ
β Tags: #web_security #bug_bounty #sensitive_data_exposure #information_disclosure
ββββββββββββββββββββββββ
πͺ Author: xploiterr
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 25 May 2026 18:31:00 GMT
ββββββββββββββββββββββββ
β Tags: #web_security #bug_bounty #sensitive_data_exposure #information_disclosure
Medium
Credentials Leaked in JS: Inspect Element, Then Exfiltrate
This bug I found on a B2B platform on the home page. This credentials leaked here are accessible to any user with the internet no loginβ¦