Company Name: Basecamp Company HackerOne URL: https://hackerone.com/basecamp Submitted By:fr4viaLink to Submitters Profile:https://hackerone.com/fr4via Report Title:Navgraph confusion allows any 3p app to...
Company Name: Node.js Company HackerOne URL: https://hackerone.com/nodejs Submitted By:tianstLink to Submitters Profile:https://hackerone.com/tianst Report Title:Bypass incomplete fix of CVE-2024-27980Report Link:https://hackerone.com/reports/2461831Date Submitted:09...
Company Name: Flickr Company HackerOne URL: https://hackerone.com/flickr Submitted By:fr4viaLink to Submitters Profile:https://hackerone.com/fr4via Report Title:Incorrect Deep-link validation leading to unresponsive application...
Company Name: Flickr Company HackerOne URL: https://hackerone.com/flickr Submitted By:0xcyborgLink to Submitters Profile:https://hackerone.com/0xcyborg Report Title:IDOR may allow access to non-public photosReport...
Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:devme4fLink to Submitters Profile:https://hackerone.com/devme4f Report Title:CVE-2024-34750 Apache Tomcat DoS vulnerability...
Company Name: Automattic Company HackerOne URL: https://hackerone.com/automattic Submitted By:xurizaemon0Link to Submitters Profile:https://hackerone.com/xurizaemon0 Report Title:Authentication & Registration Bypass in Newspack Extended...
Company Name: Ruby Company HackerOne URL: https://hackerone.com/ruby Submitted By:ooooooo_qLink to Submitters Profile:https://hackerone.com/ooooooo_q Report Title:RCE by parsing `rdoc_options` in RDocReport Link:https://hackerone.com/reports/1187477Date...
Company Name: Booking.com Company HackerOne URL: https://hackerone.com/bookingcom Submitted By:tuantv89Link to Submitters Profile:https://hackerone.com/tuantv89 Report Title:Default Admin Account lead to full access...
Company Name: inDrive Company HackerOne URL: https://hackerone.com/indrive Submitted By:zxwoLink to Submitters Profile:https://hackerone.com/zxwo Report Title:Reflected XSS of mediaindrivecomReport Link:https://hackerone.com/reports/2503113Date Submitted:02 July...
Company Name: inDrive Company HackerOne URL: https://hackerone.com/indrive Submitted By:bugsv2Link to Submitters Profile:https://hackerone.com/bugsv2 Report Title:Unlimited fake rate to the passenger in...
Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:noentryLink to Submitters Profile:https://hackerone.com/noentry Report Title:CVE-2024-31079 in nginxReport Link:https://hackerone.com/reports/2526051Date Submitted:01...
Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:noentryLink to Submitters Profile:https://hackerone.com/noentry Report Title:CVE-2024-35200 in nginxReport Link:https://hackerone.com/reports/2526041Date Submitted:01...
Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:noentryLink to Submitters Profile:https://hackerone.com/noentry Report Title:CVE-2024-32760 in nginxReport Link:https://hackerone.com/reports/2526046Date Submitted:01...
Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:ooooooo_qLink to Submitters Profile:https://hackerone.com/ooooooo_q Report Title: ActionText ContentAttachments can Contain...
Company Name: MercadoLibre Company HackerOne URL: https://hackerone.com/mercadolibre Submitted By:fr4viaLink to Submitters Profile:https://hackerone.com/fr4via Report Title:Account Takeover / Arbitrary File read and...
Company Name: U.S. Dept Of Defense Company HackerOne URL: https://hackerone.com/deptofdefense Submitted By:berserker1999Link to Submitters Profile:https://hackerone.com/berserker1999 Report Title:IDOR leading unauthenticated attacker...
Company Name: U.S. Dept Of Defense Company HackerOne URL: https://hackerone.com/deptofdefense Submitted By:sp1d3rsLink to Submitters Profile:https://hackerone.com/sp1d3rs Report Title:Local File Disclosure on...
Company Name: U.S. Dept Of Defense Company HackerOne URL: https://hackerone.com/deptofdefense Submitted By:martinvwLink to Submitters Profile:https://hackerone.com/martinvw Report Title:Subdomain takeover milReport Link:https://hackerone.com/reports/2499178Date...
Company Name: Booking.com Company HackerOne URL: https://hackerone.com/bookingcom Submitted By:jub0bsLink to Submitters Profile:https://hackerone.com/jub0bs Report Title:Subdomain takeover of ci-supportbookingcom (pointing to Zendesk)Report...
Company Name: Ruby on Rails Company HackerOne URL: https://hackerone.com/rails Submitted By:ooooooo_qLink to Submitters Profile:https://hackerone.com/ooooooo_q Report Title:DoS with crafted "Range" headerReport...
Company Name: Kubernetes Company HackerOne URL: https://hackerone.com/kubernetes Submitted By:jub0bsLink to Submitters Profile:https://hackerone.com/jub0bs Report Title:monitoringprow-canaryk8sio is vulnerable to CVE-2022-21703 (Grafana 0-day)Report...
Company Name: HackerOne Company HackerOne URL: https://hackerone.com/security Submitted By:0x999Link to Submitters Profile:https://hackerone.com/0x999 Report Title:Ability to bulk submit reports via query...
Company Name: Enjin Company HackerOne URL: https://hackerone.com/enjin Submitted By:19whoami19Link to Submitters Profile:https://hackerone.com/19whoami19 Report Title:Cloudflare /cdn-cgi/ path allows resizing images from...
Company Name: Tools for Humanity Company HackerOne URL: https://hackerone.com/toolsforhumanity Submitted By:lauritzLink to Submitters Profile:https://hackerone.com/lauritz Report Title: Insufficient Filtering of "state"...
