Dark C0d3rs

Full Version: HackerOne Disclosed Reports - 2026-05-25

You're currently viewing a stripped down version of our content. View the full version with proper formatting.

High
resolved

Autotranslate DDP Method Exposes Private Messages Without Authentication or Room Access Check

Bug reported by Sukhbat was disclosed at May 25, 2026, 2:10 pm | Insecure Direct Object Reference (IDOR)