bug bounty

HackerOne Bug Bounty Disclosure: new-/add_contacts-/remove_contacts-quick-commands-susseptible-to-xss-from-customer-contact-firstname/lastname-fieldsbycryptopone

Programme HackerOne GitLab GitLab Submitted by cryptopone cryptopone Report New /add_contacts /remove_contacts quick commands susseptible to XSS from Customer Contact...

HackerOne Bug Bounty Disclosure: admin-can-create-a-hidden-admin-account–which-even-the-owner-can-not-detect-and-remove-and-do-administrative-actions-on-the-application-by41bin