🧰 GraphQL

The items that name it 20

• Dan Kornas (@DanKornas) on X
  toolas classification.technologies2026-10-25
• https://github.com/akha-security/akca
  repoas affected products2026-09-23

  security and introspection exposure checks covered by AKCA

• Breaking: GitLab Critical Path Traversal Flaw Exploited in the Wild — Patch Immediately
  advisoryas classification.technologies2026-09-14
• CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
  advisoryas classification.technologies2026-09-14
• Could OpenClaw have actually hacked that Australian gym? We decided to test it.
  writeupas classification.technologies2026-08-25
• 91 Vulnerabilities Patched in Spring Application Framework
  articleas classification.technologies2026-08-24
• BOLA in the Wild
  articleas classification.technologies2026-08-21
• Teycir/BurpAPISecuritySuite
  repoas classification.technologies2026-08-21
• Clairvoyance
  repoas classification.technologies2026-07-31
• Hetty
  repoas classification.technologies2026-07-31
• Recon-Skills
  repoas classification.technologies2026-07-29
• Master Urlscan.io Dorking for Bug Bounty Hunting
  videoas technologies2026-07-23
• レッドエージェントの視点：航空会社のGraphQL APIにおけるオブジェクトレベルの認可の不備の悪用
  writeupas classification.technologies2026-06-29
• graphw00f
  repoas classification.technologies2026-06-14
• PentAGI
  repoas classification.technologies2026-05-23
• OpenCTI-Platform/opencti
  repoas classification.technologies2026-05-14
• Salesforce Pentest: Apex Predator
  writeupas classification.technologies2026-05-13
• GitHub Repository Rulesets
  advisoryas classification.technologies2026-05-11
• Fr6ey/WebSecurityAcademy
  repoas classification.technologies2026-05-08
• Lonkero — Rust web vulnerability scanner (v3.7, AI agent mode)
  repoas affected products

  Introspection, batching DoS, cost/complexity analysis, alias abuse, persisted queries, directive abuse, subscription vulnerabilities, fragment spreading, authorization bypass

In every workspace you can read 23