Bug Bounty Channel

2022-08-12 15:52:14 Hacktivity from miron666

Reflected XSS at https://stories\.showmax\.com/wp\-content/themes/theme\-internal\_ss/blocks/ajax/a\.php via \`ss\_country\_filter\` param
https://hackerone.com/reports/1663202
Disclosed at: 2022-08-12 12:51:28 UTC+0
Created at: 2022-08-08 17:54:50 UTC+0 Open / Comment

2022-08-12 02:08:45 Hacktivity from s1r1u5

Disabling context isolation, nodeIntegrationInSubFrames using an unauthorised frame\.
https://hackerone.com/reports/1647287
Disclosed at: 2022-08-11 23:08:15 UTC+0
Created at: 2022-07-23 04:36:37 UTC+0 Open / Comment

2022-08-12 01:22:14 Hacktivity from 0x50d

Admin panel Exposure without credential at https://plus\-website\.shopifycloud\.com/admin\.php
https://hackerone.com/reports/1417288
Disclosed at: 2022-08-11 22:21:48 UTC+0
Created at: 2021-12-05 19:36:43 UTC+0 Open / Comment

2022-08-11 23:47:14 Hacktivity from hammodmt

Wordpress Users Disclosure \(/wp\-json/wp/v2/users/\)
https://hackerone.com/reports/1663363
Disclosed at: 2022-08-11 20:46:19 UTC+0
Created at: 2022-08-08 23:11:05 UTC+0 Open / Comment

2022-08-11 22:53:34 Hacktivity from bhaskar\_ram

fix\(security\):Path Traversal Bug
https://hackerone.com/reports/1664244
Disclosed at: 2022-08-11 19:53:16 UTC+0
Created at: 2022-08-09 17:07:15 UTC+0 Open / Comment

2022-08-11 15:51:02 Hacktivity from sohelahmed786

Disable xmlrpc\.php file
https://hackerone.com/reports/712321
Disclosed at: 2022-08-11 12:50:04 UTC+0
Created at: 2019-10-11 16:45:17 UTC+0 Open / Comment

2022-08-11 14:10:00 Hacktivity from mr\_vrush

Redirection in Repeater & Intruder Tab
https://hackerone.com/reports/1541301
Disclosed at: 2022-08-11 11:09:45 UTC+0
Created at: 2022-04-14 12:06:28 UTC+0 Open / Comment

2022-08-11 08:37:04 Hacktivity from cet2000

many commands can be manipulated to delete identities or affiliations
https://hackerone.com/reports/348090
Disclosed at: 2022-08-10 14:23:14 UTC+0
Created at: 2018-05-07 06:47:29 UTC+0 Open / Comment

2022-08-10 12:38:44 Hacktivity from mega7

Read\-only administrator can change agent update settings
https://hackerone.com/reports/1538004
Disclosed at: 2022-08-10 09:38:40 UTC+0
Created at: 2022-04-11 20:34:30 UTC+0 Open / Comment

2022-08-10 08:10:10 Hacktivity from emanelyazji

\[CRITICAL\] Full account takeover without user interaction on sign with Apple flow
https://hackerone.com/reports/1639802
Disclosed at: 2022-08-09 19:26:18 UTC+0
Created at: 2022-07-17 23:58:05 UTC+0 Open / Comment