Bug Bounty Channel

2021-02-22 05:16:17 Hacktivity from kwel

Наблюдатель может оставновить базу данных \[mcs\.mail\.ru\]
https://hackerone.com/reports/982753
Disclosed at: 2021-02-15 21:22:52 UTC+0
Created at: 2020-09-15 13:24:08 UTC+0 Open / Comment

2021-02-22 05:16:15 Hacktivity from kwel

Partner's manager can aсccess statistics of all drivers \[city\-mobil\.ru/taxiserv\]
https://hackerone.com/reports/1061623
Disclosed at: 2021-02-15 21:22:09 UTC+0
Created at: 2020-12-18 13:37:01 UTC+0 Open / Comment

2021-02-22 05:16:13 Hacktivity from ach

External SSRF and Local File Read via video upload due to vulnerable FFmpeg HLS processing
https://hackerone.com/reports/1062888
Disclosed at: 2021-02-15 20:16:56 UTC+0
Created at: 2020-12-20 11:13:21 UTC+0 Open / Comment

2021-02-15 17:45:57 Hacktivity from anshraj\_srivastava

Remote hacker can download all the files of master branch in public projects where everything is members only\.
https://hackerone.com/reports/1043480
Disclosed at: 2021-02-15 14:45:11 UTC+0
Created at: 2020-11-25 15:24:46 UTC+0 Open / Comment

2021-02-15 14:45:39 Hacktivity from r0hack

Account TakeOver at kvartira\.city\-mobil\.ru
https://hackerone.com/reports/1004360
Disclosed at: 2021-02-15 11:44:59 UTC+0
Created at: 2020-10-09 23:57:15 UTC+0 Open / Comment

2021-02-15 06:22:13 Hacktivity from melbadry9

DNS Miconfiguration \(Subdomain Takeover\) ███\.wavecell\.com
https://hackerone.com/reports/1089502
Disclosed at: 2021-02-15 03:21:29 UTC+0
Created at: 2021-01-28 14:26:21 UTC+0 Open / Comment

2021-02-14 19:29:43 Hacktivity from sodium\_

Stored XSS in Intense Debate comment system
https://hackerone.com/reports/1039750
Disclosed at: 2021-02-14 16:29:23 UTC+0
Created at: 2020-11-20 17:01:25 UTC+0 Open / Comment

2021-02-14 19:25:38 Hacktivity from sanmue

External Storage \- WebDAV \- New user has access to storage from deleted user \(same user\-ID\)
https://hackerone.com/reports/549831
Disclosed at: 2021-02-14 16:24:44 UTC+0
Created at: 2019-04-28 18:30:08 UTC+0 Open / Comment

2021-02-14 19:24:35 Hacktivity from nihad4u

DoS attack against the client when entering a long password
https://hackerone.com/reports/949712
Disclosed at: 2021-02-14 16:23:55 UTC+0
Created at: 2020-08-02 13:45:45 UTC+0 Open / Comment

2021-02-14 19:22:32 Hacktivity from stefanniedermann

New users can read all Nextcloud Deck data from previous user with same username
https://hackerone.com/reports/882258
Disclosed at: 2021-02-14 16:22:30 UTC+0
Created at: 2020-05-25 13:56:48 UTC+0 Open / Comment