token-bruteforce 1 Broken Access Control – Admin Access Token Brute Force Leads to Unauthorized Admin Access | Gift List Apr 30, 2026