json-injection 2 NoSQL Injection via Search Filter Object Leads to Hidden Rental Disclosure | SwiftSearch Hotels Jun 3, 2026 NoSQL Injection Authentication Bypass – Admin Panel Access | SnickerDoodle May 11, 2026