Published inInfoSec Write-upsSQL Injection: How I Secured Personal Information (PII) of 1.1M Job SeekersThis blog discusses the discovery of an SQL Injection vulnerability on SLRC asset, exposing personal information of 1.1M job seekers.Nov 14, 2024129Nov 14, 2024129
Published inInfoSec Write-upsIDOR + Account Takeover: How I Secured Personal Information (PII) of 5.17M Electricity ConsumersThis blog discusses the discovery of 2 critical vulnerabilities at APDCL, exposing personal data of 5.17M electricity consumers.Jun 15, 202488612Jun 15, 202488612
Published inInfoSec Write-upsAWS S3 Bucket Misconfiguration Exposes PII and Documents of Job SeekersThis blog discusses a misconfiguration in an AWS S3 bucket owned by Oil India Limited, which exposed the PII and documents of job seekers.May 1, 2024572May 1, 2024572