HexBrain

U.S. Dept Of Defense · Report #2061982

Create account without auth via response manipulation

Validstatus
lowseverity
42upvotes
12 Jan 2026disclosed

How it was found

Description: hello team DoD <3 after searching i found register panel but it need verify event code to login , so i testing for that , i founded a Create account without auth via response manipulation

Impact

create and join a event without event code or verify email

System Host(s)

███

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

Steps : 1- go to ██████ 2- click in i dont have CAC 3- now see the video PoC : i insert it

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original