Judel777

Cap-go - App Existence Oracle via Unauthenticated transfer_app RPC

Capgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpoint

Capgo - Account Creation Before CAPTCHA Validation in accept_invitation Endpoint

Capgo - Cross-Tenant Preview Namespace Collision via Non-Bijective Underscore Decoding

Capgo - Plan Bypass via Unrestricted Attachment Upload Endpoint

Capgo - Channel Configuration Mutation via Write-Scoped API Keys

Capgo - Information Disclosure via get_orgs_v7 RPC Endpoint

Capgo - Unauthorized Manifest Insertion via Read-Only Org Member

Capgo - Unauthenticated Metrics Disclosure via get_total_metrics RPC

Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPC