Bug Bounty Channel

2022-05-31 17:37:38 Hacktivity from demonia

Improper input\-size validation on the user new session name can result in server\-side DDoS\.
https://hackerone.com/reports/1153138
Disclosed at: 2022-05-31 14:37:25 UTC+0
Created at: 2021-04-06 17:50:43 UTC+0 Open / Comment

2022-05-31 13:16:15 Hacktivity from mohit0786

BlIND XSS on https://open\.vanillaforums\.com
https://hackerone.com/reports/1189885
Disclosed at: 2022-05-31 10:15:33 UTC+0
Created at: 2021-05-10 10:07:56 UTC+0 Open / Comment

2022-05-31 12:10:38 Hacktivity from mega7

Self XSS in attachments name
https://hackerone.com/reports/1536901
Disclosed at: 2022-05-31 09:10:35 UTC+0
Created at: 2022-04-10 22:01:58 UTC+0 Open / Comment

2022-05-30 12:22:07 Hacktivity from darkknight4688

Users who are restricted to use the application because of a "Waiting List" are able to get access to the Beta Application by bypassing the waitlist
https://hackerone.com/reports/1494308
Disclosed at: 2022-05-30 09:21:25 UTC+0
Created at: 2022-02-28 17:57:19 UTC+0 Open / Comment

2022-05-28 21:19:09 Hacktivity from piao

CVE\-2022\-28738: Double free in Regexp compilation
https://hackerone.com/reports/1549636
Disclosed at: 2022-05-28 18:18:28 UTC+0
Created at: 2022-04-25 03:55:55 UTC+0 Open / Comment

2022-05-27 10:24:57 Hacktivity from david\_h1

Control character filtering misses leading and trailing whitespace in file and folder names
https://hackerone.com/reports/1402249
Disclosed at: 2022-05-27 07:23:54 UTC+0
Created at: 2021-11-17 02:30:13 UTC+0 Open / Comment

2022-05-27 10:23:51 Hacktivity from qj\_test

Notification implicit PendingIntent in com\.nextcloud\.client allows to access contacts
https://hackerone.com/reports/1161401
Disclosed at: 2022-05-27 07:23:00 UTC+0
Created at: 2021-04-12 12:20:36 UTC+0 Open / Comment

2022-05-27 01:18:50 Hacktivity from ian

Full read SSRF in flyte\-poc\-us\-east4\.uberinternal\.com
https://hackerone.com/reports/1540906
Disclosed at: 2022-05-26 22:18:02 UTC+0
Created at: 2022-04-14 03:58:25 UTC+0 Open / Comment

2022-05-26 19:23:45 Hacktivity from ashutosh7

\[Urgent\] Critical Vulnerability \[RCE\] on ███ vulnerable to Remote Code Execution by exploiting MS15\-034, CVE\-2015\-1635
https://hackerone.com/reports/469730
Disclosed at: 2022-05-26 16:23:28 UTC+0
Created at: 2018-12-18 19:13:01 UTC+0 Open / Comment

2022-05-26 15:41:55 Hacktivity from hollaatm3

Read Other Users Reports Through Cloning
https://hackerone.com/reports/1505609
Disclosed at: 2022-05-26 12:41:28 UTC+0
Created at: 2022-03-09 20:31:34 UTC+0 Open / Comment