Field · Vault Ocean

/

LatestcriticalAccess Control4 min read

IDOR to full account takeover via predictable UUIDv1

Time-based UUIDs leaked creation order; enumerating them exposed password-reset tokens for any user.

More from the field

Blind SSRF reaching cloud metadata through a PDF rendererSSRF · anonhigh6 min Stored XSS via Markdown image onerror in a comment fieldXSS · anonhigh3 min JWT alg confusion: forging tokens by switching RS256 to HS256Authentication · anoncritical5 min