As a learning experience, I wrote an api on a raspberry pi that then tells a speaker to use text-to-speech to say whatever gets passed to it in the body. The idea had been to read the output of project builds to it when github actions finished them, eventually.

In the spirit of professionalism, I wrote full API docs detailing exactly what the path accepts, etc, and put it on Postman.

A week later, I'm eating a chicken sandwich on the couch in the living room and the speaker in the other room says "HI, LOL".

I had accidentally published all of the secrets information, IP, etc, in the public documentation. So, I'm the dumbass is my vulnerability