bug bounty

HackerOne Bug Bounty Disclosure: able-to-approve-admin-approval-and-change-effective-status-without-adding-payment-details–bybisesh

June 22, 2022

Programme HackerOne Reddit Reddit Submitted by bisesh bisesh Report Able to approve admin approval and change effective status without adding...

HackerOne Bug Bounty Disclosure: admin-authentication-bypass-lead-to-admin-account-takeoverby7odamo

June 20, 2022

Programme HackerOne UPS VDP UPS VDP Submitted by 7odamo 7odamo Report Admin Authentication Bypass Lead to Admin Account Takeover Full...

HackerOne Bug Bounty Disclosure: authentication-csrf-resulting-in-unauthorized-account-access-on-krisp-appbyyassineaboukir

June 20, 2022

Programme HackerOne Krisp Krisp Submitted by yassineaboukir yassineaboukir Report Authentication CSRF resulting in unauthorized account access on Krisp app Full...

HackerOne Bug Bounty Disclosure: add-more-seats-by-paying-less-via-put-/v2/seats-request-manipulationbylife__001

June 20, 2022

Programme HackerOne Krisp Krisp Submitted by life__001 life__001 Report Add more seats by paying less via PUT /v2/seats request manipulation...

Bug Bounty

BugCrowd Bug Bounty Disclosure: P1 – Asana Desktop Application Includes Personal Access Token – By lauritz

June 18, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

HackerOne Bug Bounty Disclosure: csrf-(protection-bypassed)-to-force-a-below-18-user-into-viewing-an-nsfw-subreddit-!bymarvelmaniac

June 16, 2022

Programme HackerOne Reddit Reddit Submitted by marvelmaniac marvelmaniac Report CSRF (protection bypassed) to force a below 18 user into viewing...

HackerOne Bug Bounty Disclosure: stored-xss-on-tiktok-live-formbyaidilarf_2000

June 16, 2022

Programme HackerOne TikTok TikTok Submitted by aidilarf_2000 aidilarf_2000 Report Stored XSS on TikTok Live Form Full Report

HackerOne Bug Bounty Disclosure: curl-“globbing”-can-lead-to-denial-of-service-attacksbyiylz

June 16, 2022

Programme HackerOne curl curl Submitted by iylz iylz Report curl "globbing" can lead to denial of service attacks Full Report

HackerOne Bug Bounty Disclosure: cpp:-add-query-for-cwe-243-creation-of-chroot-jail-without-changing-working-directorybyihsinme

June 15, 2022

Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by ihsinme ihsinme Report CPP: Add query for CWE-243 Creation of...

HackerOne Bug Bounty Disclosure: reflected-cross-site-scripting-at-http://www-grouplogic-com/files/glidownload/verify3-asp-[uppercase-filter-bypass]byub3rsick

June 14, 2022

HackerOne Bug Bounty Disclosure: reflected-cross-site-scripting-at–coldfusion-debugging-panel–http://www-grouplogic-com/cfide/debug/cf_debugfr-cfmbyub3rsick

June 14, 2022

HackerOne Bug Bounty Disclosure: rails::html::safelistsanitizer-vulnerable-to-xss-attack-in-an-environment-that-allows-the-style-tagbywindshock

June 14, 2022

HackerOne Bug Bounty Disclosure: moderator-can-enable-cam/mic-remotely-if–cam/mic-permission-was-disabled-while-user-has-activated-cam/micbymichag86

June 9, 2022

bug bounty

HackerOne Bug Bounty Disclosure: able-to-approve-admin-approval-and-change-effective-status-without-adding-payment-details–bybisesh

HackerOne Bug Bounty Disclosure: admin-authentication-bypass-lead-to-admin-account-takeoverby7odamo

HackerOne Bug Bounty Disclosure: authentication-csrf-resulting-in-unauthorized-account-access-on-krisp-appbyyassineaboukir

HackerOne Bug Bounty Disclosure: add-more-seats-by-paying-less-via-put-/v2/seats-request-manipulationbylife__001

BugCrowd Bug Bounty Disclosure: P1 – Asana Desktop Application Includes Personal Access Token – By lauritz

HackerOne Bug Bounty Disclosure: csrf-(protection-bypassed)-to-force-a-below-18-user-into-viewing-an-nsfw-subreddit-!bymarvelmaniac

HackerOne Bug Bounty Disclosure: stored-xss-on-tiktok-live-formbyaidilarf_2000

HackerOne Bug Bounty Disclosure: curl-“globbing”-can-lead-to-denial-of-service-attacksbyiylz

HackerOne Bug Bounty Disclosure: cpp:-add-query-for-cwe-243-creation-of-chroot-jail-without-changing-working-directorybyihsinme

HackerOne Bug Bounty Disclosure: golang-:-hardcoded-secret-used-for-signing-jwtbyporcupineyhairs

HackerOne Bug Bounty Disclosure: golang-:-add-query-to-detect-pam-authorization-bugsbyporcupineyhairs

HackerOne Bug Bounty Disclosure: hyper-link-injection-while-signupby011alsanosi

HackerOne Bug Bounty Disclosure: reflected-cross-site-scripting-at-http://www-grouplogic-com/files/glidownload/verify3-asp-[uppercase-filter-bypass]byub3rsick

HackerOne Bug Bounty Disclosure: reflected-cross-site-scripting-at–coldfusion-debugging-panel–http://www-grouplogic-com/cfide/debug/cf_debugfr-cfmbyub3rsick

HackerOne Bug Bounty Disclosure: rails::html::safelistsanitizer-vulnerable-to-xss-attack-in-an-environment-that-allows-the-style-tagbywindshock

HackerOne Bug Bounty Disclosure: html-injection-in-e-mailbymega7

HackerOne Bug Bounty Disclosure: lack-of-rate-limit-on-athentification-login-page-&-forgot-password-pagebysaidkira

HackerOne Bug Bounty Disclosure: disclosure-the-live_analytics-information-of-any-livestream-bydatph4m

HackerOne Bug Bounty Disclosure: email-address-disclosure-via-invite-token-validatiionbynoob_but_cut3

HackerOne Bug Bounty Disclosure: rxss-onbytmz900

HackerOne Bug Bounty Disclosure: moderator-can-enable-cam/mic-remotely-if–cam/mic-permission-was-disabled-while-user-has-activated-cam/micbymichag86

HackerOne Bug Bounty Disclosure: integer-overflows-in-unescape_word()byddme

HackerOne Bug Bounty Disclosure: matchbymaslahhunter

HackerOne Bug Bounty Disclosure: stored-xss-on-issue-comments-and-other-pages-which-contain-notesbyjarij

CISA: CISA Releases Eight Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases New Public Version of CDM Data Model Document

CISA: CISA Releases Two Industrial Control Systems Advisories

CISA: ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies

You may have missed