#Information Disclosure
2 postsBugForge - Daily - Shady Oaks Finance (Jul 12, 2026)
The Shady Oaks forecasting feature renders the user-supplied caption through a server-side template engine, so injecting {api_key} leaks the secret straight back in the response.
SSTI Server Side Template Injection Injection Information Disclosure Sensitive Data Exposure
Posted on 2026-07-12 20:00 4 min read
BugForge - Daily - Sokudo (Jan 8, 2026)
This challenge demonstrates a broken authentication vulnerability caused by predictable session tokens combined with information disclosure. The application…
Broken Authentication Information Disclosure Session Hijacking
Posted on 2026-01-08 20:00 5 min read