Password Change IDOR Leads to Administrator Account Takeover | Noted

Lab Link Lab: Noted Overview Noted is a collaboration platform used for meeting notes, summaries, and workspace management. While exploring the application, an insecure password change mechanism...

Jun 7, 2026 A01 - Broken Access Control, IDOR

Coined NoSQL Injection Authentication Bypass

NoSQL Injection Leads to Treasury Account Takeover | Coined

Lab Link Lab: Coined Overview Coined is a cryptocurrency exchange whose treasury account controls access to a high-value recovery phrase stored within a secure Vault. During testing, the login ...

Jun 7, 2026 A05 - Injection, NoSQL Injection

Tamper Temple Broken Access Control Chain

Multi-Step Access Control Bypass Leads to Administrative Compromise | Tamper Temple

Lab Link Lab: Tamper Temple Overview Tamper Temple presents itself as a hardened portal protecting Temple Trust’s internal systems. Behind the modern interface sits a legacy API, forgotten devel...

Jun 6, 2026 A01 - Broken Access Control, Privilege Escalation

Autovation Unsafe Yaml Deserialization

title: “Unsafe YAML Deserialization Leads to Remote Code Execution | Autovation” date: 2026-06-09 21:00:00 +0530 categories: [A08 - Software or Data Integrity Failures, Unsafe Deserialization] tags...

Jun 6, 2026

The Oak ExifTool CVE-2021-22204 Remote Code Execution

Blind Remote Code Execution via ExifTool CVE-2021-22204 | The Oak

Lab Link Lab: The Oak Overview The Oak challenge demonstrates how a vulnerable third-party component in an image-processing pipeline can lead to complete server compromise. During testing, us...

Jun 5, 2026 Penetration Testing, CVE-2021-22204 (Arbitrary Code Execution via Exiftool)

Flagged Local File Inclusion via Language Cookie Leads to Arbitrary File Read

Local File Inclusion via Language Cookie Leads to Arbitrary File Read | Flagged

Lab Link Lab: Flagged Overview Flagged is a long-running online storefront that manufactures custom sailing flags and supports multiple languages through a language-switching feature. The appl...

Jun 4, 2026 A01 - Broken Access Control, Local File Inclusion

Fault Banking Exposed Git Repository Leads to Administrative Credential Disclosure

Exposed Git Repository Leads to Administrative Credential Disclosure | Fault Banking

Lab Link Lab: Fault Banking Overview Fault Banking is a regional banking platform built on Flask that exposes both customer-facing and administrative authentication portals. During assessment,...

Jun 4, 2026 A02 - Security Misconfiguration, Source Code Disclosure

NoSQL Injection via Search Filter Object Leads to Hidden Rental Disclosure | SwiftSearch Hotels

Lab Link Lab: SwiftSearch Hotels Overview SwiftSearch Hotels is a hotel and rental booking platform that recently migrated its search functionality to a JSON-based API. Instead of relying on t...

Jun 3, 2026 A05 - Injection, NoSQL Injection

GraphQL Role Parameter Abuse Leads to Restricted Medical Note Disclosure | Clearance

Lab Link Lab: Clearance Overview Clearance is a healthcare management portal used by medical staff to manage patient information and clinical records. The application uses GraphQL for data re...

Jun 3, 2026 A01 - Broken Access Control, Privilege Escalation

Authentication Bypass – Direct Dashboard Access | Pivot HR

Lab Link Lab: Pivot HR Overview Pivot HR is a small-business HR management platform that provides payroll and employee management functionality. The application appears to enforce a multi-fac...

Jun 3, 2026 A01 - Broken Access Control, Authentication Bypass