Bug Bounty

HackerOne Bug Bounty Disclosure: cross-site-scripting-reflected-on-hxxps-www-acronis-cz-dotaznik-roadshow-darkdream

Company Name: Acronis Company HackerOne URL: https://hackerone.com/acronis Submitted By:darkdreamLink to Submitters Profile:https://hackerone.com/darkdream Report Title:Cross Site Scripting (Reflected) on hXXps://wwwacroniscz/dotaznik/roadshow-2020/Report Link:https://hackerone.com/reports/1081747Date...

HackerOne Bug Bounty Disclosure: cross-site-scripting-xss-reflected-on-hxxp-h-b-e-n-ips-mtn-co-ug-via-nginx-module-renzi

Company Name: MTN Group Company HackerOne URL: https://hackerone.com/mtn_group Submitted By:renziLink to Submitters Profile:https://hackerone.com/renzi Report Title:Cross-site Scripting (XSS) - Reflected on...

HackerOne Bug Bounty Disclosure: cross-site-scripting-xss-reflected-on-hxxps-api-mtn-sd-carbon-admin-login-jsp-via-msgid-parameter-cve-renzi

Company Name: MTN Group Company HackerOne URL: https://hackerone.com/mtn_group Submitted By:renziLink to Submitters Profile:https://hackerone.com/renzi Report Title:Cross-site Scripting (XSS) - Reflected on...

HackerOne Bug Bounty Disclosure: cross-site-scripting-xss-reflected-on-hxxp-callertunez-mtn-com-gh-wap-noauth-sharedetail-ftl-via-callback-parameter-renzi

Company Name: MTN Group Company HackerOne URL: https://hackerone.com/mtn_group Submitted By:renziLink to Submitters Profile:https://hackerone.com/renzi Report Title:Cross-site Scripting (XSS) - Reflected on...

HackerOne Bug Bounty Disclosure: dod-workstation-exposed-to-internet-via-tinypilot-kvm-with-no-authentication-socpuppet

Company Name: U.S. Dept Of Defense Company HackerOne URL: https://hackerone.com/deptofdefense Submitted By:socpuppetLink to Submitters Profile:https://hackerone.com/socpuppet Report Title:DoD workstation exposed to...

HackerOne Bug Bounty Disclosure: course-registration-form-allowing-an-attacker-to-dump-all-the-candidate-name-who-had-enrolled-for-the-course-steveflex

Company Name: U.S. Dept Of Defense Company HackerOne URL: https://hackerone.com/deptofdefense Submitted By:steveflexLink to Submitters Profile:https://hackerone.com/steveflex Report Title:Course Registration Form Allowing...

HackerOne Bug Bounty Disclosure: moderate-apache-http-server-mod-rewrite-proxy-handler-substitution-cve-cwe-improper-input-validation-orange

Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:orangeLink to Submitters Profile:https://hackerone.com/orange Report Title:moderate: Apache HTTP Server: mod_rewrite...

HackerOne Bug Bounty Disclosure: leaking-usernames-through-endpoints-wordpress-alitoni

Company Name: MTN Group Company HackerOne URL: https://hackerone.com/mtn_group Submitted By:alitoni224Link to Submitters Profile:https://hackerone.com/alitoni224 Report Title:Leaking usernames through endpoints WordpressReport Link:https://hackerone.com/reports/1785021Date...

HackerOne Bug Bounty Disclosure: idor-lets-a-malicious-user-reveal-the-unpinned-achievement-badges-of-any-reddit-user-saurabhb

Company Name: Reddit Company HackerOne URL: https://hackerone.com/reddit Submitted By:saurabhbLink to Submitters Profile:https://hackerone.com/saurabhb Report Title:IDOR lets a malicious user reveal the...

HackerOne Bug Bounty Disclosure: permissions-can-be-bypassed-via-arbitrary-code-execution-through-abusing-libuv-signal-pipes-xion

Company Name: Node.js Company HackerOne URL: https://hackerone.com/nodejs Submitted By:xionLink to Submitters Profile:https://hackerone.com/xion Report Title:Permissions can be bypassed via arbitrary code...