exploit database
"If you're even thinking of doing any security engineering, you need to read this book" — bruce schneier
I'm not sure how serious this thing is, but an application error should never disclose account data including passwords.
ilja van sprundel.
