skeletonsec

home research writeups projects about services

tag: 2fa

2026-09-04 phpMyFAQ: session-only auth downgrade, password change without verification, and TOTP secret in data export

Everything here ships with evidence or it doesn't ship.

© 2026 skeletonsec · security@skeletonsec.com · rss · github · security.txt

26 CVEs (dbu.gs) GitHub: @skeletonsec