⤷ Title: How I Hacked An Overseas Education Consultancy Firm
════════════════════════
𐀪 Author: Ansh Vaid
════════════════════════
ⴵ Time: Thu, 26 Dec 2024 08:01:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #sql_injection #vulnerability #sensitive_data_exposure #ethical_hacking
════════════════════════
𐀪 Author: Ansh Vaid
════════════════════════
ⴵ Time: Thu, 26 Dec 2024 08:01:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #sql_injection #vulnerability #sensitive_data_exposure #ethical_hacking
Medium
How I Hacked An Overseas Education Consultancy Firm
The purpose of this blog is to share my bug hunting experience with cybersecurity enthusiasts and researchers, to provide them the insights…
⤷ Title: Sensitive Data Exposured — PII Data Leak Via Account Registration Inquiry
════════════════════════
𐀪 Author: kevstrs_
════════════════════════
ⴵ Time: Fri, 27 Dec 2024 15:34:31 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #pentesting #pii_data #api_security
════════════════════════
𐀪 Author: kevstrs_
════════════════════════
ⴵ Time: Fri, 27 Dec 2024 15:34:31 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #pentesting #pii_data #api_security
Medium
Sensitive Data Exposured — PII Data Leak Via Account Registration Inquiry
What is Sensitive Data Exposure?
👍1
⤷ Title: Sensitive Information Disclosure in 5 minutes
════════════════════════
𐀪 Author: Muhammad Haziqul Khair
════════════════════════
ⴵ Time: Wed, 29 Jan 2025 00:21:21 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #web_pentesting #reconnaissance #cybersecurity #bug_bounty
════════════════════════
𐀪 Author: Muhammad Haziqul Khair
════════════════════════
ⴵ Time: Wed, 29 Jan 2025 00:21:21 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #web_pentesting #reconnaissance #cybersecurity #bug_bounty
Medium
Sensitive Information Disclosure in 5 minutes
In this article, I’ll walk you through a real bug bounty discovery where I discovered Sensitive information(employee CVs) in 5 minutes…
⤷ Title: Try Fuzzing Backup Files During Manual Pentesting
════════════════════════
𐀪 Author: Just R
════════════════════════
ⴵ Time: Sun, 23 Feb 2025 21:36:27 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty_writeup #fuzzing #bug_hunting #penetration_testing
════════════════════════
𐀪 Author: Just R
════════════════════════
ⴵ Time: Sun, 23 Feb 2025 21:36:27 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty_writeup #fuzzing #bug_hunting #penetration_testing
Medium
Try Fuzzing Backup Files During Manual Pentesting
Bappenas.
⤷ Title: Fuzzing Backup File Path to Get Sensitive Data Exposure
════════════════════════
𐀪 Author: Just R
════════════════════════
ⴵ Time: Sun, 23 Feb 2025 21:36:27 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty_writeup #fuzzing #bug_hunting #penetration_testing
════════════════════════
𐀪 Author: Just R
════════════════════════
ⴵ Time: Sun, 23 Feb 2025 21:36:27 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty_writeup #fuzzing #bug_hunting #penetration_testing
Medium
Fuzzing Backup File Path to Get Sensitive Data Exposure
Bappenas.
⤷ Title: Sensitive Data Exposure in Symfony: Fix It Fast
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Sun, 20 Apr 2025 07:45:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability #sensitive_data_exposure #symfony #penetration_testing
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Sun, 20 Apr 2025 07:45:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability #sensitive_data_exposure #symfony #penetration_testing
Medium
Sensitive Data Exposure in Symfony: Fix It Fast
In today’s world of web applications, sensitive data exposure continues to be a top security concern — especially for Symfony developers…
⤷ Title: ️ Sensitive Data Exposure via WP-JSON in WordPress
════════════════════════
𐀪 Author: Noorsaper
════════════════════════
ⴵ Time: Thu, 29 May 2025 00:41:48 GMT
════════════════════════
⌗ Tags: #rest_api #owasp #bug_bounty #sensitive_data_exposure #wordpress
════════════════════════
𐀪 Author: Noorsaper
════════════════════════
ⴵ Time: Thu, 29 May 2025 00:41:48 GMT
════════════════════════
⌗ Tags: #rest_api #owasp #bug_bounty #sensitive_data_exposure #wordpress
Medium
🕵️ Sensitive Data Exposure via WP-JSON in WordPress
The WordPress REST API exposes certain user information through public endpoints. Specifically, the endpoint: This information can aid attackers in further exploitation, such as brute force or…
⤷ Title: GraphQL Role Escalation and Data Exposure
════════════════════════
𐀪 Author: Omer Mohsen
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 22:10:40 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #security_testing #bug_bounty #graphql #web_application_security
════════════════════════
𐀪 Author: Omer Mohsen
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 22:10:40 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #security_testing #bug_bounty #graphql #web_application_security
Medium
GraphQL Role Escalation and Data Exposure
.بسم الله الرحمن الرحيم, اللهم صلي وسلم وزد وبارك على سيدنا محمد وعلى آله وصحبه وسلم
⤷ Title: Accidental Exposure of Private GraphQL Fields
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 02:00:34 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #graphql_vulnerability #sensitive_data_exposure #graphql_field_exposure
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 02:00:34 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #graphql_vulnerability #sensitive_data_exposure #graphql_field_exposure
Medium
Accidental Exposure of Private GraphQL Fields
Discover how poorly secured GraphQL fields can expose sensitive data and allow unauthorized access — even admin accounts.
⤷ Title: Accidental Exposure of Private GraphQL Fields
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 11:59:11 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #graphql_vulnerability #sensitive_data_exposure #graphql_field_exposure
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 11:59:11 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #graphql_vulnerability #sensitive_data_exposure #graphql_field_exposure
Medium
Accidental Exposure of Private GraphQL Fields
Discover how poorly secured GraphQL fields can expose sensitive data and allow unauthorized access — even admin accounts.
⤷ Title: Sensitive Data Exposure in React: Fixes & Examples
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Sun, 31 Aug 2025 10:50:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #sensitive_data_exposure #vulnerability #reactjs #cybersecurity
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Sun, 31 Aug 2025 10:50:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #sensitive_data_exposure #vulnerability #reactjs #cybersecurity
Medium
Sensitive Data Exposure in React: Fixes & Examples
Why Sensitive Data Exposure Happens in React
⤷ Title: Entities vs DTOs: Protecting Your API and Clients
════════════════════════
𐀪 Author: Kites Software
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 15:59:34 GMT
════════════════════════
⌗ Tags: #api_security #dto #data_transfer_object #spring_boot_rest_api #sensitive_data_exposure
════════════════════════
𐀪 Author: Kites Software
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 15:59:34 GMT
════════════════════════
⌗ Tags: #api_security #dto #data_transfer_object #spring_boot_rest_api #sensitive_data_exposure
Medium
Entities vs DTOs: Protecting Your API and Clients
Written by @MaiAbdelhameed, Software Engineer in the Couch Potatoes squad at Kites Software 🥔
⤷ Title: Fastest Way to Crawl JavaScript Files for Sensitive Data Exposure | The Best Bug Bounty Pipeline…
════════════════════════
𐀪 Author: Alham Rizvi
════════════════════════
ⴵ Time: Sat, 03 Jan 2026 08:29:51 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_hunting #bug_bounty_tips #sensitive_data_exposure #bug_bounty
════════════════════════
𐀪 Author: Alham Rizvi
════════════════════════
ⴵ Time: Sat, 03 Jan 2026 08:29:51 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_hunting #bug_bounty_tips #sensitive_data_exposure #bug_bounty
Medium
Fastest Way to Crawl JavaScript Files for Sensitive Data Exposure | The Best Bug Bounty Pipeline for 2026
are we cooked fr gng
⤷ Title: From CORS Misconfiguration to Sensitive Data Exposure
════════════════════════
𐀪 Author: montaser mohsen
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 18:40:08 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty_tips #web_security #cors #bug_bounty
════════════════════════
𐀪 Author: montaser mohsen
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 18:40:08 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty_tips #web_security #cors #bug_bounty
Medium
From CORS Misconfiguration to Sensitive Data Exposure
My name is Montaser Mohsen, and I’m an independent security researcher and bug bounty hunter. I spend a large part of my time analyzing web…
⤷ Title: AI System Reconnaissance — TryHackMe Walkthrough
════════════════════════
𐀪 Author: Rotimi Ishola
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:38:52 GMT
════════════════════════
⌗ Tags: #system_architecture #api_security #security_misconfiguration #ai_systems #sensitive_data_exposure
════════════════════════
𐀪 Author: Rotimi Ishola
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:38:52 GMT
════════════════════════
⌗ Tags: #system_architecture #api_security #security_misconfiguration #ai_systems #sensitive_data_exposure
Medium
AI System Reconnaissance — TryHackMe Walkthrough
29.04.2026
⤷ Title: Credentials Leaked in JS: Inspect Element, Then Exfiltrate
════════════════════════
𐀪 Author: xploiterr
════════════════════════
ⴵ Time: Mon, 25 May 2026 18:31:00 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #sensitive_data_exposure #information_disclosure
════════════════════════
𐀪 Author: xploiterr
════════════════════════
ⴵ Time: Mon, 25 May 2026 18:31:00 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #sensitive_data_exposure #information_disclosure
Medium
Credentials Leaked in JS: Inspect Element, Then Exfiltrate
This bug I found on a B2B platform on the home page. This credentials leaked here are accessible to any user with the internet no login…
⤷ Title: How an Unauthenticated API Endpoint Exposed 19,990 User Records
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 20:38:12 GMT
════════════════════════
⌗ Tags: #pii #security #sensitive_data_exposure #hacking #bugbounty_writeup
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 20:38:12 GMT
════════════════════════
⌗ Tags: #pii #security #sensitive_data_exposure #hacking #bugbounty_writeup
Medium
I Changed One URL Parameter and Found PII Exposed Across 19,990 User Profiles
How a missing authorization check turned a profile API into a data exposure risk.
⤷ Title: How a Simple Dork Led to a Critical 10.0 CVSS
════════════════════════
𐀪 Author: 0x7ipher
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 22:40:43 GMT
════════════════════════
⌗ Tags: #web_security #env_file #sensitive_data_exposure #vulnerability_disclosure #bug_bounty
════════════════════════
𐀪 Author: 0x7ipher
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 22:40:43 GMT
════════════════════════
⌗ Tags: #web_security #env_file #sensitive_data_exposure #vulnerability_disclosure #bug_bounty
Medium
How a Simple Dork Led to a Critical 10.0 CVSS
A critical (CVSS 10.0) vulnerability does not necessarily involve a complicated zero-day attack chain. At times, simple misconfigurations…
⤷ Title: The Codebase Told Me It Was Sensitive. They Shipped It Publicly Anyway.
════════════════════════
𐀪 Author: 0x_specter
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 17:51:01 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty #cybersecurity #broken_access_control #infosec
════════════════════════
𐀪 Author: 0x_specter
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 17:51:01 GMT
════════════════════════
⌗ Tags: #sensitive_data_exposure #bug_bounty #cybersecurity #broken_access_control #infosec
Medium
The Codebase Told Me It Was Sensitive. They Shipped It Publicly Anyway.
Sometimes the most convincing proof that a leak matters isn’t your own argument — it’s the target’s own code, contradicting itself.
⤷ Title: When a QR Code Became the Starting Point: Discovering Exposed Healthcare Application Resources
════════════════════════
𐀪 Author: Sandeepappsec
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 08:24:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #wapt #sensitive_data_exposure #appsec #penetration_testing
════════════════════════
𐀪 Author: Sandeepappsec
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 08:24:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #wapt #sensitive_data_exposure #appsec #penetration_testing
Medium
When a QR Code Became the Starting Point: Discovering Exposed Healthcare Application Resources
A real-world application security assessment involving directory listing, sensitive data exposure, report access, and administrative…