#InfoDisclosure
LightNews LightNews
yogsec.bsky.social
OSINT Tip: Google Dork for Finding Exposed Error Logs and Debug Pages

site:URL ("error log" OR "debug" OR "stack trace") filetype:log OR filetype:txt

For more tips join Telegram channel t.me/bugbountyusa

#OSINT #GoogleDorks #Recon #ErrorLogs #InfoSec #DebugExposure #InfoDisclosure #InfoGathering
Bug Bounty USA
Bug Bounty Tips Telegram channel gives you tips about bug bounty. Happy Hacking! yogsec.net
t.me
October 28, 2026 at 11:54 AM
yogsec.bsky.social
Bug Bounty Tip: Account Takeover via OTP Leaked in Response

Look for:

POST /send-otp or POST /verify-phone

Test by intercepting the API response and checking for the OTP in hidden fields.

For more tips Telegram channel: t.me/bugbountyusa

#BugBounty #OTPLeak #AccountTakeover #InfoDisclosure
Bug Bounty Tips
Bug Bounty Tips Telegram channel gives you tips about bug bounty. Happy Hacking! linktr.ee/abhinavsingwal
t.me
October 17, 2026 at 1:23 AM
sempf.infosec.exchange.ap.brid.gy
I just gave a two hour talk on this. Devs say "just make sure noone steals the keys." Riiiight.

https://securityaffairs.com/197504/cyber-crime/50000-stripe-secrets-leaked-in-public-code.html

#infodisclosure #api
50,000 Stripe Secrets Leaked in Public Code
Over 50,000 exposed Stripe API keys show how leaked secrets can enable fraud, data access and account abuse within hours.
securityaffairs.com
August 20, 2026 at 3:30 AM
sempf.infosec.exchange.ap.brid.gy
What Microsoft isn't saying here it this is because putting the machine key in source control was default behaviour in visual studio for a looong time. Going back to team server.

https://www.darkreading.com/vulnerabilities-threats/sitecore-zero-day-viewstate-threats

#microsoft #infodisclosure
September 5, 2025 at 4:05 AM
securityonline.bsky.social
TP-Link Kasa vulnerability CVE-2026-9770 (CVSS 8.6) lets local attackers intercept admin credentials on EC70 and EC71 cameras. Update firmware now.

#TPLink #Kasa #IoTSecurity #CVE20269770 #InfoDisclosure
CVE-2026-9770: Information Disclosure Vulnerability Exposes Admin Credentials on TP-Link Kasa Cameras
TL;DR TP-Link has patched two information disclosure flaws in Kasa EC70 v4 and EC71 v4 cameras. The more severe TP-Link Kasa vulnerability, CVE-2026-9770 (CVSS 8.6), stems from a hardcoded cryptographic key that enables credential interception. A second flaw, CVE-2026-13230 (CVSS 5.3), leaks geolocation data without authentication. TP-Link reports no in-the-wild exploitation, and no public proof-of-concept exists. Why It Matters Kasa cameras sit inside homes and small offices, watching private spaces.
securityonline.info
July 17, 2026 at 1:52 AM
breachandbuild.bsky.social
🔴 CVE-2026-33670 | CRITICAL! A severe flaw in SiYuan allows unauthorized information disclosure. Your personal knowledge is at risk. Learn how to protect...

#CVE #BreachAndBuild #SiYuan #InfoDisclosure #CriticalVulnerability

https://breachandbuild.com/cve-2026-33670-cve-2026-33670-critical/
April 17, 2026 at 6:34 AM
breachandbuild.bsky.social
🔴 CVE-2026-33669: CRITICAL information disclosure vulnerability in SiYuan identified! Sensitive data is at risk. Read our blog for full details and mitigation steps NOW.

#CVE #BreachAndBuild #SiYuan #InfoDisclosure #PKS

https://breachandbuild.com/cve-2026-33669-cve-2026-33669-critical/
April 16, 2026 at 8:00 AM