Curated security research, vulnerabilities, advisories and tools for practitioners.

#broken-access-control

Security coverage tagged broken-access-control.

1.

Otto Support - Testing MCP Servers

blog | 2026-06-03 00:00 | bishopfox.com | original ↗ | #ai-security | #pentesting | #agentic-ai

2.

Hacking An AI Children's Toy: Remote Access to Every Conversation

blog | 2026-01-29 00:00 | josephthacker.com | original ↗ | #ai-security | #data-exposure | #iot

3.

Hacker spotlight: Amr

blog | 2025-11-05 13:00 | bugcrowd.com | original ↗ | #bug-bounty | #bugcrowd | #hacker-spotlight

4.

How an IDOR Vulnerability Led to User Profile Modification

vulnerability | 2024-10-08 20:53 | hackerone.com | original ↗ | #bug-bounty | #web-security | #idor

5.

How To Find Broken Access Control Vulnerabilities in the Wild

research | 2024-09-30 18:42 | hackerone.com | original ↗ | #bug-bounty | #access-control | #web-security

6.

Disclosing a Tic Tac Bow Vulnerability to Project 99

vulnerability | 2023-08-02 08:08 | projectblack.io | original ↗ | #vulnerability-disclosure | #owasp | #broken-access-control

7.

What is OWASP Top 10?

blog | 2023-07-12 00:00 | aikido.dev | original ↗ | #web-security | #risk-management | #owasp

8.

How to Catch Broken Access Control Security Vulnerabilities in Code Review Part 2

blog | 2022-01-05 00:00 | hackerone.com | original ↗ | #access-control | #code-review | #privilege-escalation

9.

How to Catch the Top OWASP 2021 Security Category - Broken Access Control - in Code Review

blog | 2022-01-03 00:00 | hackerone.com | original ↗ | #access-control | #code-review | #web-security

10.

The Rise of IDOR

blog | 2021-04-02 15:00 | hackerone.com | original ↗ | #access-control | #web-security | #idor