Welcome to the NullCore Labs blog, our dispatch from the front lines of cybersecurity.

Here we share raw findings and case studies from our security engagements, exploring how modern applications are broken and secured. This is practical, hands-on intelligence for the professionals who build and protect our digital world.

NullCore Labs July 18, 2025

How an Expired Trial Led to a Critical Email Verification Bypass

During a recent pentest of a coworking space management application, our team had a really productive start. We quickly found some serious stuff: a critical IDOR that let us hijack other tenants' payment methods, and a stored XSS right in the admin dashboard. We also…