Qqilnrnelinqilnrnel-test.hashnode.dev00HN-2026-002 PoC v2: updatePost coAuthor bypass3h ago · 1 min read · Demonstrates unauthorized co-author attribution via updatePost — no team pub required.Join discussion
Qqilnrnelinqilnrnel-test.hashnode.dev00Cross-pub publishDraft IDOR test3h ago · 1 min read · Testing if publishDraft respects publication ownershipJoin discussion
Qqilnrnelinqilnrnel-test.hashnode.dev00HN-2026-002 PoC: Unauthorized Co-Author Attribution4h ago · 1 min read · This post demonstrates HN-2026-002. The co-author listed below (0SPwn) was attributed without their knowledge or consent using a single authenticated API call.Join discussion