Kelvin Security Labs

CTF Writeups | Pentesting Labs | Exploits

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Tags theforms

Tag

theforms 1

IDOR in Password Reset API Leads to Administrator Account Takeover | TheForms Jun 8, 2026

Recently Updated

Next.js Middleware Authorization Bypass (CVE-2025-29927) | BugVault
Autovation Unsafe Yaml Deserialization
Multi-Step Access Control Bypass Leads to Administrative Compromise | Tamper Temple
NoSQL Injection Leads to Treasury Account Takeover | Coined
Password Change IDOR Leads to Administrator Account Takeover | Noted

Trending Tags

webversepro broken-access-control webverselabs-pro privilege-escalation information-disclosure linux rce authentication-bypass bugforge idor

© 2026 Kelvin. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

webversepro broken-access-control webverselabs-pro privilege-escalation information-disclosure linux rce authentication-bypass bugforge idor

A new version of content is available.