HN-2026-002 PoC v2: updatePost coAuthor bypassDemonstrates unauthorized co-author attribution via updatePost — no team pub required.Apr 26 · 1 min readqilnrnel-test.hashnode.dev
Cross-pub publishDraft IDOR testTesting if publishDraft respects publication ownershipApr 26 · 1 min readqilnrnel-test.hashnode.dev
HN-2026-002 PoC: Unauthorized Co-Author AttributionThis post demonstrates HN-2026-002. The co-author listed below (0SPwn) was attributed without their knowledge or consent using a single authenticated API call.Apr 26 · 1 min readqilnrnel-test.hashnode.dev