Bug Bounty Channel

2022-05-18 21:59:43 Hacktivity from haxatron1

Bypass global deny\-lists by wrapping domains using "\[\]" in https://github\.com/stripe/smokescreen
https://hackerone.com/reports/1528242
Disclosed at: 2022-05-18 18:59:23 UTC+0
Created at: 2022-04-01 19:17:31 UTC+0 Open / Comment

2022-05-18 15:14:21 Hacktivity from dyls

Conduit feed\.publish API allows you to spoof other users or make it look like you have access to a restricted object
https://hackerone.com/reports/1566325
Disclosed at: 2022-05-18 12:14:06 UTC+0
Created at: 2022-05-11 21:19:12 UTC+0 Open / Comment

2022-05-17 16:46:36 Hacktivity from 0f1c3r

Integer overflow vulnerability
https://hackerone.com/reports/1562515
Disclosed at: 2022-05-17 13:46:07 UTC+0
Created at: 2022-05-07 16:46:30 UTC+0 Open / Comment

2022-05-17 11:55:09 Hacktivity from omarelfarsaoui

\[app\.lemlist\.com\] Improper handling of payment lead to bypass payment
https://hackerone.com/reports/1420697
Disclosed at: 2022-05-17 08:54:42 UTC+0
Created at: 2021-12-09 00:18:16 UTC+0 Open / Comment

2022-05-16 23:07:09 Hacktivity from naaash

Privilege Escalation on TikTok for Business
https://hackerone.com/reports/1505567
Disclosed at: 2022-05-16 20:06:34 UTC+0
Created at: 2022-03-09 19:23:04 UTC+0 Open / Comment

2022-05-16 17:00:39 Hacktivity from sawrav\-chowdhury

Site information's Display Name section vulnerable for XSS attacks and HTML Injections\.
https://hackerone.com/reports/1554888
Disclosed at: 2022-05-16 13:59:43 UTC+0
Created at: 2022-04-29 19:56:51 UTC+0 Open / Comment

2022-05-16 12:42:13 Hacktivity from mr23r0

Security misconfiguration
https://hackerone.com/reports/1486327
Disclosed at: 2022-05-16 09:41:20 UTC+0
Created at: 2022-02-20 07:42:18 UTC+0 Open / Comment

2022-05-16 12:01:38 Hacktivity from sybr

CVE\-2022\-27781: CERTINFO never\-ending busy\-loop
https://hackerone.com/reports/1555441
Disclosed at: 2022-05-16 09:01:16 UTC+0
Created at: 2022-04-30 19:24:14 UTC+0 Open / Comment

2022-05-16 11:57:29 Hacktivity from albertspedersen

HTTP Request Smuggling in Transform Rules using hexadecimal escape sequences in the concat\(\) function
https://hackerone.com/reports/1478633
Disclosed at: 2022-05-16 08:57:07 UTC+0
Created at: 2022-02-11 14:50:58 UTC+0 Open / Comment

2022-05-16 01:21:45 Hacktivity from mrrobot2050

Origin IP found, WAF Cloudflare Bypass
https://hackerone.com/reports/1536299
Disclosed at: 2022-05-15 10:20:52 UTC+0
Created at: 2022-04-09 19:56:57 UTC+0 Open / Comment