Bug Bounty Channel

2021-03-02 16:23:47 Hacktivity from 3x3s

Memory Dump and Env Disclosure via Spring Boot Actuator
https://hackerone.com/reports/1019367
Disclosed at: 2021-03-02 13:22:56 UTC+0
Created at: 2020-10-26 21:23:33 UTC+0 Open / Comment

2021-03-02 00:07:27 Hacktivity from jackb898

Coupon codes indexed by Google
https://hackerone.com/reports/783622
Disclosed at: 2021-03-01 21:06:42 UTC+0
Created at: 2020-01-26 14:28:09 UTC+0 Open / Comment

2021-03-01 22:23:34 Hacktivity from fransrosen

Config override using non\-validated query parameter allows at least reflected XSS by injecting configuration into state
https://hackerone.com/reports/1082847
Disclosed at: 2021-03-01 19:23:24 UTC+0
Created at: 2021-01-21 00:56:42 UTC+0 Open / Comment

2021-03-01 19:46:56 Hacktivity from secator

\[xss\] setTheme в ajax\_attach\_action
https://hackerone.com/reports/800414
Disclosed at: 2021-03-01 16:46:26 UTC+0
Created at: 2020-02-20 10:37:47 UTC+0 Open / Comment

2021-03-01 19:46:54 Hacktivity from secator

\[xss\] перенаправление со старых url в почте
https://hackerone.com/reports/784989
Disclosed at: 2021-03-01 16:46:17 UTC+0
Created at: 2020-01-28 17:55:45 UTC+0 Open / Comment

2021-03-01 19:46:52 Hacktivity from secator

\[xss\] passrestore на m/touch/tel
https://hackerone.com/reports/778314
Disclosed at: 2021-03-01 16:46:06 UTC+0
Created at: 2020-01-20 12:55:09 UTC+0 Open / Comment

2021-03-01 17:19:15 Hacktivity from 0ang3el

XXE на webdav\.mail\.ru \- PROPFIND/PROPPATCH
https://hackerone.com/reports/758978
Disclosed at: 2021-03-01 14:18:19 UTC+0
Created at: 2019-12-15 17:21:22 UTC+0 Open / Comment

2021-03-01 17:18:12 Hacktivity from 0ang3el

Blind SSRF на calendar\.mail\.ru при импорте календаря
https://hackerone.com/reports/758948
Disclosed at: 2021-03-01 14:17:39 UTC+0
Created at: 2019-12-15 16:39:58 UTC+0 Open / Comment

2021-03-01 14:03:29 Hacktivity from alexanderhofstaetter

Acting under any different user via DB\-stored credentials
https://hackerone.com/reports/1061591
Disclosed at: 2021-03-01 11:02:24 UTC+0
Created at: 2020-12-18 12:53:55 UTC+0 Open / Comment

2021-03-01 14:02:23 Hacktivity from yzy9951

Reflected XSS when renaming a file with a vulnerable name which results in an error
https://hackerone.com/reports/896522
Disclosed at: 2021-03-01 11:02:05 UTC+0
Created at: 2020-06-12 08:17:47 UTC+0 Open / Comment