Judel777

Capgo - Open Redirect via Unvalidated Stripe Billing URLs

Capgo - App ID Confusion via ILIKE Wildcard in Preview Subdomain Lookup

Capgo - App Existence Oracle via GET /statistics/app/:app_id

Cap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*

Cap-go - Broken Cursor Pagination in /private/devices Endpoint

Capgo - Denial of Service via Unauthenticated OPTIONS Request to /build/upload Endpoint

Capgo - Policy Enforcement Bypass in Webhook Management Endpoints via Non-Expiring API Keys

Capgo - Information Disclosure via Unauthenticated /replication Endpoint

Capgo - Unauthenticated Organization Member Email Disclosure via get_org_members RPC

Capgo - Unauthenticated API Key Validity Oracle and User Identity Disclosure via get_identity_apikey_only RPC