Another exposed Supabase DB strikes: 20k+ attendees and FULL write access