May 10, 2026, 06:05 PM
Today I drop ipscorp.vn users data containing names, emails, phone numbers, corporate affiliations, and account details PII of 13,914 users. The exploit was using an exposed IDOR on their API (/api/services/app/User/GetAll) revealing all their users' information without requiring admin privileges.
Data Exposed:
download : t.me/+08CiDxqpad0zZDdh
By : 271
Data Exposed:
Quote:- Full names (first name, surname, display name)
- Email addresses (personal and business)
- Phone numbers (international format - +61, +84, +86, +65, etc.)
- Usernames (many are phone numbers)
- Account status (active/inactive)
- Account creation dates
- User roles and permissions
- Corporate affiliations (company names linked to users)
download : t.me/+08CiDxqpad0zZDdh
By : 271