HackerOne Bug Bounty Disclosure: security-misconfigurationbymr23r0
Programme HackerOne lemlist lemlist Submitted by mr23r0 mr23r0 Report Security misconfiguration Full Report
Bug Bounty
HackerOne Bug Bounty Disclosure: http-request-smuggling-in-transform-rules-using-hexadecimal-escape-sequences-in-the-concat()-functionbyalbertspedersen
Programme HackerOne Cloudflare Public Bug Bounty Cloudflare Public Bug Bounty Submitted by albertspedersen albertspedersen Report HTTP Request Smuggling in Transform...
HackerOne Bug Bounty Disclosure: site-information’s-display-name-section-vulnerable-for-xss-attacks-and-html-injections-bysawrav-chowdhury
Programme HackerOne Automattic Automattic Submitted by sawrav-chowdhury sawrav-chowdhury Report Site information's Display Name section vulnerable for XSS attacks and HTML...
HackerOne Bug Bounty Disclosure: origin-ip-found,-waf-cloudflare-bypassbymrrobot2050
Programme HackerOne SMTP2GO BBP SMTP2GO BBP Submitted by mrrobot2050 mrrobot2050 Report Origin IP found, WAF Cloudflare Bypass Full Report
HackerOne Bug Bounty Disclosure: download-full-backup–[mtn-co-rw]byibrahimatix0x01
Programme HackerOne MTN Group MTN Group Submitted by ibrahimatix0x01 ibrahimatix0x01 Report Download full backup Full Report
HackerOne Bug Bounty Disclosure: disclose-stuff-member-name-and-make-actions-byzambo
Programme HackerOne Shopify Shopify Submitted by zambo zambo Report Disclose STUFF member name and make actions. Full Report
HackerOne Bug Bounty Disclosure: credential-leak-on-redirectbyiylz
Programme HackerOne curl curl Submitted by iylz iylz Report Credential leak on redirect Full Report
HackerOne Bug Bounty Disclosure: public-postman-api-collection-leaks-internal-access-to-https://assets-paris-dev-codefi-network/bypolem4rch
Programme HackerOne Consensys Consensys Submitted by polem4rch polem4rch Report Public Postman Api Collection Leaks Internal access to https://assets-paris-dev.codefi.network/ Full Report
HackerOne Bug Bounty Disclosure: disclose-customer-orders-details-by-shopify-chat-application-byzambo
Programme HackerOne Shopify Shopify Submitted by zambo zambo Report Disclose customer orders details by shopify chat application. Full Report
HackerOne Bug Bounty Disclosure: [cpp]:-add-query-for-cwe-190:-integer-overflow-or-wraparound-when-using-transform-after-operationbyihsinme
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by ihsinme ihsinme Report : Add query for CWE-190: Integer Overflow...
HackerOne Bug Bounty Disclosure: cookie-injection-from-non-secure-contextbynyymi
Programme HackerOne curl curl Submitted by nyymi nyymi Report Cookie injection from non-secure context Full Report
HackerOne Bug Bounty Disclosure: [java]-cwe-016:-query-to-detect-insecure-configuration-of-spring-boot-actuatorbyluchua
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by luchua luchua Report CWE-016: Query to detect insecure configuration of...
HackerOne Bug Bounty Disclosure: memory-leak-in-curlopt_xoauth2_bearerbypappacoda
Programme HackerOne curl curl Submitted by pappacoda pappacoda Report Memory leak in CURLOPT_XOAUTH2_BEARER Full Report
HackerOne Bug Bounty Disclosure: [java]:-cwe-321—query-to-detect-hardcoded-jwt-secret-keysbyluchua
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by luchua luchua Report : CWE-321 - Query to detect hardcoded...
HackerOne Bug Bounty Disclosure: [cpp]:-add-query-for-cwe-754:-improper-check-for-unusual-or-exceptional-conditions-when-using-functions-scanfbyihsinme
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by ihsinme ihsinme Report : Add query for CWE-754: Improper Check...
HackerOne Bug Bounty Disclosure: [java]:-cwe-552-add-sources-and-sinks-to-detect-unsafe-getresource-calls-in-java-ee-applicationsbyluchua
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by luchua luchua Report : CWE-552 Add sources and sinks to...
BugCrowd Bug Bounty Disclosure: P4 – Reflected XSS in https://www.indeed.com/career-advice/ – By cr00k
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
BugCrowd Bug Bounty Disclosure: P4 – Self XSS on my.indeed.com affecting multiple input fields – By iman122
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
HackerOne Bug Bounty Disclosure: storage-of-old-passwords-in-plain-text-formatbysubuganz
Programme HackerOne Recorded Future Recorded Future Submitted by subuganz subuganz Report Storage of old passwords in plain text format Full...
BugCrowd Bug Bounty Disclosure: P4 – No DMARC Record Found – By sujan_shetty
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
HackerOne Bug Bounty Disclosure: misconfigured-rate-limit-in-sending-notifications-to-the-victims-phone-via-the-endpoint-“-/faxes/inbox-“byshamim_12__
Programme HackerOne Alohi Alohi Submitted by shamim_12__ shamim_12__ Report Misconfigured Rate Limit in Sending Notifications to the Victims Phone Via...
BugCrowd Bug Bounty Disclosure: P4 – XSS via file name – https://sms.indeed.com/signup/signage-details/ – By CGuillaume
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
HackerOne Bug Bounty Disclosure: reflected-xss-in-https://sh-reddit-combyabhiramsita
Programme HackerOne Reddit Reddit Submitted by abhiramsita abhiramsita Report Reflected xss in https://sh.reddit.com Full Report
BugCrowd Bug Bounty Disclosure: P4 – Email HTML Injection at https://baito.indeed.com – By danibhai
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
