Kelvin Security Labs

CTF Writeups | Pentesting Labs | Exploits

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Tags theforms

Tag

theforms 1

IDOR in Password Reset API Leads to Administrator Account Takeover | TheForms Jun 8, 2026

Recently Updated

SQL Injection Leads to Internal Service Exposure via SSRF | Probed
Hidden GraphQL Field Leads to API Key Disclosure | BuggedUp
Prompt Injection Leads to Remote Code Execution | Plotted
PHP Object Injection Leads to Arbitrary File Write | Archived
Server-Side Includes Injection Leads to Remote Code Execution | Tockerry

Trending Tags

webversepro webverse-pro webverselabs-pro information-disclosure broken-access-control privilege-escalation authentication-bypass rce linux sql-injection

© 2026 Kelvin. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

webversepro webverse-pro webverselabs-pro information-disclosure broken-access-control privilege-escalation authentication-bypass rce linux sql-injection

New content available