LogicalBreach Academy Feed https://academy.logicalbreach.com/ Latest bug bounty writeups, tools and security cheatsheets en-us Sun, 20 Sep 2026 01:28:16 GMT <![CDATA[IDOR in Business User CRM Contact Endpoint Exposes Other Users’ Internal Contact IDs]]> https://academy.logicalbreach.com//writeups/idor-in-business-user-crm-contact-endpoint-exposes-other-users-internal-contact-ids-a2c141d0 75c43598-8e84-468c-a0bd-f226ef9cf78d Sun, 23 Aug 2026 15:25:08 GMT <![CDATA[Unauthenticated IDOR in Notification API Enables Cross-User Read, Write, and Delete of Dashboard Notifications]]> https://academy.logicalbreach.com//writeups/unauthenticated-idor-in-notification-api-enables-cross-user-read-write-and-delete-of-dashboard-notifications-cbddc496 5552d75c-7393-43de-b9c5-8aefa0eb4c74 Sun, 23 Aug 2026 15:12:24 GMT <![CDATA[Unauthenticated IDOR in Invoice PDF Export Exposes Any Customer’s Billing Document via Enumerable Booking ID]]> https://academy.logicalbreach.com//writeups/unauthenticated-idor-in-invoice-pdf-export-exposes-any-customer-s-billing-document-via-enumerable-booking-id-5a1b3901 f064004f-05c8-44b9-a5ab-5e684f3df001 Sun, 23 Aug 2026 15:07:19 GMT <![CDATA[Cross-Tenant IDOR in AI Chat History Endpoint Allows Developers to Read Other Developers’ Conversations]]> https://academy.logicalbreach.com//writeups/cross-tenant-idor-in-ai-chat-history-endpoint-allows-developers-to-read-other-developers-conversations-5f92849f 92778ede-b7c2-40ac-a86b-3d23b79243d0 Sun, 23 Aug 2026 15:02:29 GMT <![CDATA[CSRF in Organization Invitation Approval Flow Enables Unauthorized Onboarding of Pending Members]]> https://academy.logicalbreach.com//writeups/csrf-in-organization-invitation-approval-flow-enables-unauthorized-onboarding-of-pending-members-9e750e5e 15f66b76-e04c-4f35-8200-52d1f4025385 Sun, 09 Aug 2026 20:11:33 GMT <![CDATA[Wildcard Account Lookup and Unsalted Hash Identifiers Defeat PII Masking]]> https://academy.logicalbreach.com//writeups/wildcard-account-lookup-and-unsalted-hash-identifiers-defeat-pii-masking-202f1403 26159660-6cf5-4c06-b43a-4b63c94fb280 Tue, 21 Jul 2026 18:54:37 GMT <![CDATA[Pre-Authentication Payroll History IDOR via a Client-Supplied Employee Identifier]]> https://academy.logicalbreach.com//writeups/pre-authentication-payroll-history-idor-via-a-client-supplied-employee-identifier-20659bac c4269ee2-9e3e-45ca-aa95-9ecb0683bce5 Tue, 21 Jul 2026 18:52:14 GMT <![CDATA[Unauthenticated Oracle Boolean-Based SQL Injection Through a Legacy Search Filter]]> https://academy.logicalbreach.com//writeups/unauthenticated-oracle-boolean-based-sql-injection-through-a-legacy-search-filter-4f97867e 87b3befd-797a-431b-a737-7a8e662190fb Tue, 21 Jul 2026 18:46:49 GMT <![CDATA[Unauthenticated PL/SQL Injection via a Package-Name Parameter (Oracle, error-based)]]> https://academy.logicalbreach.com//writeups/unauthenticated-pl-sql-injection-via-a-package-name-parameter-oracle-error-based-42826779 feeec660-cd3d-404c-b312-4b9567009e47 Thu, 16 Jul 2026 14:23:23 GMT <![CDATA[Unauthenticated Error-Based SQL Injection via an Identity Header (SiteMinder SM_USER) ]]> https://academy.logicalbreach.com//writeups/unauthenticated-error-based-sql-injection-via-an-identity-header-siteminder-sm-user-975333f3 eb11cba0-0288-44e6-b026-871cc81dce67 Tue, 14 Jul 2026 10:36:13 GMT <![CDATA[[Duplicate] Reflected XSS in Import Map Overrides Enables Account Takeover]]> https://academy.logicalbreach.com//writeups/reflected-xss-in-import-map-overrides-enables-account-takeover-212e75e5 579e7431-7811-434f-a798-5db195dc84de Wed, 08 Jul 2026 17:43:31 GMT <![CDATA[[Duplicate] Unauthorized Access to PII via Improper Authentication in Registration Endpoint]]> https://academy.logicalbreach.com//writeups/unauthorized-access-to-pii-via-improper-authentication-in-registration-endpoint-b03c7a9b b93f7290-df71-4915-9418-2cebc5dda733 Wed, 08 Jul 2026 17:41:11 GMT <![CDATA[[Duplicate] DOM XSS in Charting Service's URL Parameter Enables Phishing]]> https://academy.logicalbreach.com//writeups/dom-xss-in-charting-service-s-url-parameter-enables-phishing-bd379e36 8639e0ee-a1c6-4eb3-a682-6bfa282ea83f Wed, 08 Jul 2026 17:38:56 GMT <![CDATA[[Duplicate] Reflected XSS in Chart Widget via connectorUrl Parameter]]> https://academy.logicalbreach.com//writeups/reflected-xss-in-chart-widget-via-connectorurl-parameter-ceb5bf74 5c96825a-90da-4c94-b6a6-d54b65432c5f Wed, 08 Jul 2026 17:06:07 GMT <![CDATA[[CVE-2026-40762] Unauthenticated SQL Injection in WPGraphQL < 2.11.1]]> https://academy.logicalbreach.com//writeups/cve-2026-40762-unauthenticated-sql-injection-in-wpgraphql-2-11-1-f85ad3b3 429cb620-d596-4b9b-8c73-9a8cd42df69b Wed, 08 Jul 2026 09:51:31 GMT ` identifier and reached a MySQL query path.]]> <![CDATA[Improper Access Control via Public API Key leads to Mass PII Disclosure]]> https://academy.logicalbreach.com//writeups/improper-access-control-via-public-api-key-leads-to-mass-pii-disclosure-e3ccd56e 214a9016-72bf-4722-8a76-4fb5b1413dcc Mon, 06 Jul 2026 13:56:11 GMT <![CDATA[Improper Access Control via Client-Supplied Document Identifier Leads to PII Disclosure]]> https://academy.logicalbreach.com//writeups/improper-access-control-via-client-supplied-document-identifier-leads-to-pii-disclosure-29367c5a 4d265d0a-f2b3-4428-9b07-6f9382c403b3 Fri, 03 Jul 2026 14:58:24 GMT <![CDATA[Path Traversal via an unauthenticated export/download action using client-controlled directory and filename parameters]]> https://academy.logicalbreach.com//writeups/path-traversal-via-an-unauthenticated-export-download-action-using-client-controlled-directory-and-filename-parameters-a9c49b9e 92fd26df-8c0f-4adb-a9bc-abc0c3e27bf3 Tue, 30 Jun 2026 15:56:29 GMT <![CDATA[POST-Based XSS Using Octal Escapes]]> https://academy.logicalbreach.com//writeups/post-based-xss-using-octal-escapes-51f1aab9 f589d1de-a1f1-4e61-816e-aece5bdb4ae7 Fri, 26 Jun 2026 12:00:12 GMT <![CDATA[Hardcoded Authentication Token in Public JS → Admin API Session Takeover]]> https://academy.logicalbreach.com//writeups/hardcoded-authentication-token-in-public-js-admin-api-session-takeover-0d9d0d46 0f5df200-0d17-4e56-a886-6e2da285b208 Fri, 05 Jun 2026 08:23:26 GMT <![CDATA[Improper Access Control on www.target.example through /services/formcampaign via header "option" leads to unauthenticated read/write on the production marketing-campaign database]]> https://academy.logicalbreach.com//writeups/improper-access-control-on-www-target-example-through-services-formcampaign-via-header-option-leads-to-unauthenticated-read-write-on-the-production-marketing-campaign-database-b84f1127 e6b2303c-ba46-4e14-8e41-11eef60d83f6 Mon, 01 Jun 2026 09:09:18 GMT <![CDATA[Stored XSS in public-share preview silently exposes the victim's entire drive]]> https://academy.logicalbreach.com//writeups/stored-xss-in-public-share-preview-silently-exposes-the-victim-s-entire-drive-e63671bc c48aa92f-f865-4885-9e97-00e8bec33ae7 Mon, 01 Jun 2026 09:01:59 GMT <![CDATA[Email Verification Bypass / Email Squatting via Client-Side `accounts.setAccountInfo`]]> https://academy.logicalbreach.com//writeups/email-verification-bypass-email-squatting-via-client-side-accounts-setaccountinfo-46c1127b 5ba3fdc3-573f-48b1-aaaa-fc3ca9f3f6ff Sat, 30 May 2026 14:41:50 GMT <![CDATA[Admin Panel Exposure via WAF Bypass (URL Encoding) + Broken reCAPTCHA + Internal Info Leak]]> https://academy.logicalbreach.com//writeups/admin-panel-exposure-via-waf-bypass-url-encoding-broken-recaptcha-internal-info-leak-0008950f 20482471-ba91-4f23-896a-8031f30b93a9 Sat, 30 May 2026 14:39:30 GMT <![CDATA[DOM-XSS on Central SSO Origin via Unvalidated `retryUrl` (WAF Bypass with `javascript:name`)]]> https://academy.logicalbreach.com//writeups/dom-xss-on-central-sso-origin-via-unvalidated-retryurl-waf-bypass-with-javascript-name-ac701cac ce375e45-4e79-45ae-bc31-06f134750b58 Sat, 30 May 2026 14:35:23 GMT <![CDATA[ Inventory Disruption via Quantity Manipulation in Order Creation]]> https://academy.logicalbreach.com//writeups/inventory-disruption-via-quantity-manipulation-in-order-creation-99c02266 0d7016bb-62f1-4195-97cd-324aed48fd62 Sat, 30 May 2026 14:32:15 GMT <![CDATA[Payment Method Validation Bypass via Order Update Flow]]> https://academy.logicalbreach.com//writeups/payment-method-validation-bypass-via-order-update-flow-0f9955f9 48ee7179-d538-4ecf-8c44-e6dade5a8f63 Sat, 30 May 2026 14:28:58 GMT <![CDATA[A PortSwigger-lab-style cache poisoning → pre-auth ATO with a single request]]> https://academy.logicalbreach.com//writeups/a-portswigger-lab-style-cache-poisoning-pre-auth-ato-with-a-single-request-6dce8f5e c3d6a5e6-edf4-4d85-9ca6-bd0250b40e41 Sat, 30 May 2026 10:19:44 GMT <![CDATA[SQL Injection on api.redacted-target.com through /api/v1/auth/login via POST parameter "module" leads to Sensitive Data Exposure and Remote Code Execution]]> https://academy.logicalbreach.com//writeups/pre-authenticated-sql-injection-on-api-redacted-target-com-through-api-v1-auth-login-via-post-parameter-module-leads-to-sensitive-data-exposure-and-remote-code-execution-3905cf93 fb24986c-4fb3-4738-9ac4-211c251600a2 Wed, 20 May 2026 20:37:50 GMT <![CDATA[SQL Injection on api.target.example through /api/v1/projects via POST parameter "tableName" leads to Remote Code Execution (RCE)]]> https://academy.logicalbreach.com//writeups/sql-injection-on-api-target-example-through-api-v1-projects-via-post-parameter-tablename-leads-to-remote-code-execution-rce-3fc57486 c88c7929-5f68-4a91-9b2d-91372ebf74a8 Wed, 20 May 2026 20:32:29 GMT <![CDATA[MFA Bypass via Account Attribute Manipulation]]> https://academy.logicalbreach.com//writeups/mfa-bypass-via-account-attribute-manipulation-77cec1bd 9a3511d7-ad50-4e03-b5d8-ad4cc6115393 Fri, 24 Apr 2026 10:07:29 GMT <![CDATA[Escalating a Reflected XSS to High Severity via Filter Bypass and Cache-Assisted Delivery]]> https://academy.logicalbreach.com//writeups/escalating-a-reflected-xss-to-high-severity-via-filter-bypass-and-cache-assisted-delivery-f3fc7324 3bf1081e-e928-4b5a-8adf-5a9a11ca7913 Wed, 22 Apr 2026 17:18:45 GMT <![CDATA[Escalating Reflected XSS to High Severity via WAF Bypass + Credential Phishing]]> https://academy.logicalbreach.com//writeups/escalating-reflected-xss-to-high-severity-via-waf-bypass-credential-phishing-ffd8112d 1df52883-4160-489d-b947-613a102cad92 Wed, 22 Apr 2026 11:37:17 GMT <![CDATA[DOM XSS to High Severity via Credential Phishing Overlay]]> https://academy.logicalbreach.com//writeups/dom-xss-to-high-severity-via-credential-phishing-overlay-df9c3034 c7f521c5-c007-4816-bb02-3b630469012b Sun, 19 Apr 2026 14:17:51 GMT <![CDATA[[Duplicate] Open Redirect Flow Abuse via OAuth Validation Bypass]]> https://academy.logicalbreach.com//writeups/duplicate-open-redirect-flow-abuse-via-oauth-validation-bypass-32d63048 d6a29801-290c-41cf-95c6-10dc58ae9b5a Sat, 11 Apr 2026 18:03:51 GMT <![CDATA[[Duplicate] Reflected XSS to Account Takeover (Credential Hijacking)]]> https://academy.logicalbreach.com//writeups/duplicate-reflected-xss-to-account-takeover-credential-hijacking-6df42df2 9a055de6-cbba-4607-a43e-1b3c32351c0d Sat, 11 Apr 2026 17:59:00 GMT <![CDATA[Open Redirect — Base64-Encoded Parameter Bypasses Client-Side Validation on Login Page]]> https://academy.logicalbreach.com//writeups/open-redirect-base64-encoded-parameter-bypasses-client-side-validation-on-login-page-d33fb2e0 053dba54-9289-4d7a-926d-7bcb10a8e42d Wed, 01 Apr 2026 09:22:56 GMT <![CDATA[Information Disclosure — Unauthenticated API Exposes PII of 500+ Employees and Enterprise Clients]]> https://academy.logicalbreach.com//writeups/information-disclosure-unauthenticated-api-exposes-pii-of-500-employees-and-enterprise-clients-852b28b3 79211a1d-3ac6-4da0-bc2d-705a9d94a0ed Wed, 01 Apr 2026 09:20:38 GMT <![CDATA[HTML Injection via Email Address Payloads]]> https://academy.logicalbreach.com//writeups/html-injection-via-email-address-payloads-3b0e2d6e fb73a723-3dea-4719-b0f8-0dd5d3781c11 Tue, 24 Mar 2026 18:27:43 GMT <![CDATA[Business Logic Flaw Allowing Free Plan Users to Assign Restricted Roles]]> https://academy.logicalbreach.com//writeups/business-logic-flaw-allowing-free-plan-users-to-assign-restricted-roles-5813b01a 2d623f8c-7ddb-4ad3-8258-1c81fb660e66 Wed, 18 Mar 2026 23:30:49 GMT <![CDATA[How to bypass Cloudflare restrictions using Burp Suite]]> https://academy.logicalbreach.com//cheatsheets/how-to-bypass-cloudflare-restrictions-using-burp-suite-944d259f 3b8e9d1a-3d05-4c24-a008-35d0df3a5219 Tue, 17 Mar 2026 19:41:58 GMT <![CDATA[2FA Bypass Despite Fix via Manual Injection of isVerifyAuth Cookie in Local Storage]]> https://academy.logicalbreach.com//writeups/2fa-bypass-despite-fix-via-manual-injection-of-isverifyauth-cookie-in-local-storage-cad7154e 4153f1cc-f004-41c6-9e9e-ff1dc670f251 Tue, 17 Mar 2026 18:42:12 GMT <![CDATA[Automated Pentesting with Claude AI]]> https://academy.logicalbreach.com//cheatsheets/automated-pentesting-with-claude-ai-799cd439 8f102632-ec9e-446b-ac16-3ddfe2bebca1 Tue, 17 Mar 2026 18:20:07 GMT <![CDATA[IDOR leads Unauthorized Staff Member Removal via Insufficient Authorization Checks]]> https://academy.logicalbreach.com//writeups/idor-leads-unauthorized-staff-member-removal-via-insufficient-authorization-checks-20ae7643 97b06e15-e674-4c37-9754-57eb903a680d Tue, 17 Mar 2026 18:16:10 GMT <![CDATA[XSS Bypass to Zero Click Account Takeover in AI Chatbot]]> https://academy.logicalbreach.com//writeups/xss-bypass-to-zero-click-account-takeover-in-ai-chatbot-265f0dff f7a38824-a2cd-4061-953d-38defed4cc35 Tue, 17 Mar 2026 18:12:34 GMT <![CDATA[Exposed .env File Leading to Full Email Account Takeover]]> https://academy.logicalbreach.com//writeups/exposed-env-file-leading-to-full-email-account-takeover-196a7b57 35ede773-442a-46c9-a6cb-2b75cb3273b1 Tue, 17 Mar 2026 11:29:57 GMT <![CDATA[2 IDOR’s & WAF Bypass to Expose Full Event Database]]> https://academy.logicalbreach.com//writeups/2-idor-s-waf-bypass-to-expose-full-event-database-d5d344f5 2472ab10-9970-4caf-bb83-fb2402d70c88 Tue, 17 Mar 2026 10:26:03 GMT <![CDATA[IDOR Leading to Plaintext SFTP Credential Disclosure and Unauthorized SFTP Access]]> https://academy.logicalbreach.com//writeups/idor-leading-to-plaintext-sftp-credential-disclosure-and-unauthorized-sftp-access-2aad24dc 30cb0f42-f3c0-4af2-814b-56be10e587ef Mon, 16 Mar 2026 11:19:56 GMT <![CDATA[Scaling IDOR: Automated PII Exfiltration via Notification Configuration Endpoints]]> https://academy.logicalbreach.com//writeups/scaling-idor-automated-pii-exfiltration-via-notification-configuration-endpoints-feeb1b23 68b91674-7f65-47ad-ad7c-c6fe16331cbd Mon, 16 Mar 2026 11:12:35 GMT <![CDATA[HTML Injection to DoS (P2)]]> https://academy.logicalbreach.com//writeups/html-injection-to-dos-p2-40869d85 d3ea46d4-747d-48a4-ba27-ad52014f727d Sat, 14 Mar 2026 21:10:41 GMT