Curated security research, vulnerabilities, advisories and tools for practitioners.

#authorization-bypass

Security coverage tagged authorization-bypass.

1.

Breaking into Google's GFile for $100k

blog | 2026-09-11 00:00 | bughunters.google.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #access-control

2.

Finding eight high-severity vulnerabilities in NodeBB in six hours

research | 2026-07-22 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #featured | #vulnerability-research

3.

The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System

blog | 2026-07-15 13:33 | wiz.io | Original ↗ | .md | #api-security | #authorization-bypass | #red-agent

4.

The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API

blog | 2026-06-29 09:31 | wiz.io | Original ↗ | .md | #data-exposure | #api-security | #graphql

5.

The Masked Namespace Vulnerability In Temporal CVE-2025-14986

vulnerability | Medium | 2026-02-05 00:00 | CVE-2025-14986 | depthfirst.com | Original ↗ | .md | #cloud | #vulnerability-research | #multi-tenancy

6.

How a $20 Smart Device Gave Me Access to Your Home

blog | 2025-10-02 00:00 | bishopfox.com | Original ↗ | .md | #zero-day | #session-management | #iot-security

7.

YoSmart YoLink Hub version 0382

blog | 2025-10-02 00:00 | bishopfox.com | Original ↗ | .md | #vulnerability-disclosure | #iot-security | #smart-home

8.

Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform

blog | 2023-08-03 00:00 | samcurry.net | Original ↗ | .md | #bug-bounty | #path-traversal | #pii