WebHacking 2 How I managed to find the personal documents of all users due to a misconfigured API Jan 13, 2026 API Misconfiguration lead to Full ATO Apr 2, 2024