password-reset 2 Password Change IDOR Leads to Administrator Account Takeover | Noted Jun 7, 2026 Weak Password Reset – Brute Force of 4-Digit Reset Token Leading to Account Takeover | Heartwood Outfitters May 19, 2026