Topic: security flaw

  • India's Income Tax Portal Security Flaw Exposed Taxpayer Data

    India's Income Tax Portal Security Flaw Exposed Taxpayer Data

    A security flaw on India's official income tax e-Filing portal allowed logged-in users to access other taxpayers' confidential data, including bank details and government ID numbers, by manipulating web requests. The vulnerability, identified as an insecure direct object reference (IDOR), was rep...

    Read More »
  • Melbourne Developer Exposes Gift Card Security Flaw

    Melbourne Developer Exposes Gift Card Security Flaw

    A security flaw in gift cards from major Australian retailers allowed thieves to guess PINs easily due to unprotected API endpoints with no rate limiting. Melbourne developer Simon Dean discovered the vulnerability, tested it with a script, and found funds drained from his cards, with slow respon...

    Read More »