Cybersecurity · Disclosure
Security & Research
Real-world vulnerabilities found in audits, written up as anonymous case studies.
-
Backend as a Service · RLS
When the database is left wide open
An internal system exposed orders, payments and customer conversations with no authentication, due to missing row-level security (RLS) rules.
-
Course platform · Paywall
Paid courses within anyone's reach
Subscriber-only content —videos and PDFs— was served with no session or verification, and an access email list in the public JavaScript granted free access to the paid product.
-
Data exposure · Cloud Storage
Thousands of users exposed and a wide-open storage bucket
A platform let anyone read the full PII of its sellers and the user list, and allowed writing to and deleting files in its bucket with no credentials.
-
API · Personal data
The API field that should never have been public
A reused type exposed the phone number of every user interacting with a listing, with no authentication. The lesson: authorize per field, not per endpoint.
-
Arbitrary write · Cloud Storage
When the client picks where to store: arbitrary uploads to a bucket
A presigned-URL endpoint accepted the destination path from the browser. With a free account, you could upload executable HTML from the platform's official domain.
-
Data exposure · Backend as a Service
Over 280,000 contacts within anyone's reach
A betting platform let anyone look up the name, email, phone, address and date of birth of any user from just their national ID, and exposed internal financial metrics. All without authentication.