πNew WriteupβοΈ
βββββββββββββββ
πDate: Sat, 30 Sep 2023 20:08:56 GMT
βββββββββββββββ
βοΈTitle: IDOR and Mass Assignment attacks leads to Full Account Takeover of Internal Employees
βββββββββββββββ
πLink: https://medium.com/p/a59cd998e568
βββββββββββββββ
Tags: #bug_bounty #mass_assignment #security #idor_vulnerability
βββββββββββββββ
πDate: Sat, 30 Sep 2023 20:08:56 GMT
βββββββββββββββ
βοΈTitle: IDOR and Mass Assignment attacks leads to Full Account Takeover of Internal Employees
βββββββββββββββ
πLink: https://medium.com/p/a59cd998e568
βββββββββββββββ
Tags: #bug_bounty #mass_assignment #security #idor_vulnerability
Medium
IDOR and Mass Assignment attacks leads to Full Account Takeover of Internal Employees
Hi everyone, I hope you are doing well. Itβs been a while since I last published an article about my findings. In this article, I willβ¦
β€· Title: Mass Assignment leads to Account Takeover and DoS
ββββββββββββββββββββββββ
πͺ Author: Rahul Singh Chauhan
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 17 Jan 2026 05:02:56 GMT
ββββββββββββββββββββββββ
β Tags: #bug_bounty #account_takeover #mass_assignment #cybersecurity #application_security
ββββββββββββββββββββββββ
πͺ Author: Rahul Singh Chauhan
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 17 Jan 2026 05:02:56 GMT
ββββββββββββββββββββββββ
β Tags: #bug_bounty #account_takeover #mass_assignment #cybersecurity #application_security
Medium
Mass Assignment leads to Account Takeover and DoS
In this blog post, Iβll talk about a mass assignment vulnerability leading to account takeover and denial of service.
β€· Title: How I Bypassed a SaaS Payment Flow to Gain Organization Admin & Paid Features During Signup
ββββββββββββββββββββββββ
πͺ Author: Mahmoud Rashed
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 06 Feb 2026 14:49:34 GMT
ββββββββββββββββββββββββ
β Tags: #yeswehack #business_logic_bug #bug_bounty #web_security #mass_assignment
ββββββββββββββββββββββββ
πͺ Author: Mahmoud Rashed
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 06 Feb 2026 14:49:34 GMT
ββββββββββββββββββββββββ
β Tags: #yeswehack #business_logic_bug #bug_bounty #web_security #mass_assignment
Medium
How I Bypassed a SaaS Payment Flow to Gain Organization Admin & Paid Features During Signup
TL;DR
β€· Title: How I Bypassed a SaaS Payment Flow to Gain Organization Admin & Paid Features During Signup
ββββββββββββββββββββββββ
πͺ Author: Mohamed Saied
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 06 Feb 2026 14:48:38 GMT
ββββββββββββββββββββββββ
β Tags: #mass_assignment #bug_bounty #yeswehack #business_logic_bug #web_security
ββββββββββββββββββββββββ
πͺ Author: Mohamed Saied
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 06 Feb 2026 14:48:38 GMT
ββββββββββββββββββββββββ
β Tags: #mass_assignment #bug_bounty #yeswehack #business_logic_bug #web_security
Medium
How I Bypassed a SaaS Payment Flow to Gain Organization Admin & Paid Features During Signup
Written by Mohamed Saied | Age 21 | Jr. Penetration Tester
β€· Title: Exploiting a Mass Assignment Vulnerability
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 21 Feb 2026 09:46:42 GMT
ββββββββββββββββββββββββ
β Tags: #rest_api_testing #bug_bounty #mass_assignment #business_logic #api_security_testing
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 21 Feb 2026 09:46:42 GMT
ββββββββββββββββββββββββ
β Tags: #rest_api_testing #bug_bounty #mass_assignment #business_logic #api_security_testing
Medium
Exploiting a Mass Assignment Vulnerability
How a Hidden API Parameter Turned a $1337 Jacket Into a Free Purchase.
β€· Title: Mass Assignment - When Your API Lets Users Write Their Own Permission Slip
ββββββββββββββββββββββββ
πͺ Author: Rufus Kehinde
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 19 Mar 2026 18:36:21 GMT
ββββββββββββββββββββββββ
β Tags: #mass_assignment #api #cybersecurity #application_security #fintech
ββββββββββββββββββββββββ
πͺ Author: Rufus Kehinde
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 19 Mar 2026 18:36:21 GMT
ββββββββββββββββββββββββ
β Tags: #mass_assignment #api #cybersecurity #application_security #fintech
Medium
Mass Assignment - When Your API Lets Users Write Their Own Permission Slip
Some vulnerabilities require sophisticated tools and deep technical knowledge to exploit. This one requires a curious mind, a browser, andβ¦
β€· Title: Lab 4#: Exploiting a mass assignment vulnerability
ββββββββββββββββββββββββ
πͺ Author: mohamed
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 25 Jun 2026 15:31:16 GMT
ββββββββββββββββββββββββ
β Tags: #api_security #mass_assignment #bug_bounty_tips #owasp_top_10 #web_security
ββββββββββββββββββββββββ
πͺ Author: mohamed
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 25 Jun 2026 15:31:16 GMT
ββββββββββββββββββββββββ
β Tags: #api_security #mass_assignment #bug_bounty_tips #owasp_top_10 #web_security
Medium
Lab 4#: Exploiting a mass assignment vulnerability
Hello readers! I am Mohammad Reza, and today we will be discussing how to solve the fourth lab in the PortSwigger API Testing Academyβ¦
β€· Title: CVSS 10 Hoppscotch Mass Assignment: Full Server Compromise
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 29 Jun 2026 01:00:04 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_50160 #Full Server Compromise #Hoppscotch #Mass Assignment
ββββββββββββββββββββββββ
πͺ Author: Do Son
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 29 Jun 2026 01:00:04 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2026_50160 #Full Server Compromise #Hoppscotch #Mass Assignment
Daily CyberSecurity
CVSS 10 Hoppscotch Mass Assignment: Full Server Compromise
A critical Hoppscotch mass assignment vulnerability threatens self-hosted API deployments. The flaw, tracked as CVE-2026-50160, allows unauthenticated users to take over instances completely. TL;Dβ¦