Tag: mass-assignment

All the articles with the tag "mass-assignment".

• Session Fixation: Hijacking an Admin Account Through Support Access

  kOaDT

  28 Feb, 2026

  Exploiting a mass assignment flaw in a support access token endpoint to generate a session for the admin account and access the admin dashboard.

• Mass Assignment: Admin Privilege Escalation via Signup

  kOaDT

  15 Jan, 2026

  Exploiting a mass assignment vulnerability in OopsSec Store's signup endpoint to create an account with administrator privileges.