pentester.land· Jun 30, 2023· by Jonathan Bouman (@JonathanBouman)

Laravel debug mode left on at Zouikwatzeggen.nl leaks admin credentials & potentially submitted reports of improper behaviour at Amsterdam University Medical Centers

Open Original Article ↗
Target Program: AmsterdamUMC
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Debug mode enabled#Android#Email spoofing#Information disclosure