data-exfiltration 1 SQL Injection – UNION-Based Credential Extraction via Profile API | Ottergram May 2, 2026