Kelvin Security Labs

CTF Writeups | Pentesting Labs | Exploits

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Tags operator-injection

Tag

operator-injection 1

NoSQL Injection via Search Filter Object Leads to Hidden Rental Disclosure | SwiftSearch Hotels Jun 3, 2026

Recently Updated

Next.js Middleware Authorization Bypass (CVE-2025-29927) | BugVault
Autovation Unsafe Yaml Deserialization
Multi-Step Access Control Bypass Leads to Administrative Compromise | Tamper Temple
NoSQL Injection Leads to Treasury Account Takeover | Coined
Password Change IDOR Leads to Administrator Account Takeover | Noted

Trending Tags

webversepro broken-access-control webverselabs-pro privilege-escalation information-disclosure linux rce authentication-bypass bugforge idor

© 2026 Kelvin. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

webversepro broken-access-control webverselabs-pro privilege-escalation information-disclosure linux rce authentication-bypass bugforge idor

A new version of content is available.