Ayaa Hamed·Dec 2, 2025How I Discovered 1,400+ Users’ PII Through a GraphQL Query — and Uncovered 5 More Bugs Using the…Hey everyone!A response icon16A response icon16
Ayaa Hamed·Jul 26, 2025The Bug Hiding in Plain Sight: A Simple Click Led to Cross-Org Account TakeoverSometimes, the most powerful bugs don’t hide behind layers of complexity— they sit quietly in the open, waiting for someone to ask the…A response icon5A response icon5
