Bug Bounty Channel

2021-02-13 12:56:01 Hacktivity from jayesh25

Clickjacking Vulnerability via https://www\.donationalerts\.com/help/support leads to bypass for widget\.support\.my\.games X\-Frame Options
https://hackerone.com/reports/1027192
Disclosed at: 2021-02-12 08:04:33 UTC+0
Created at: 2020-11-05 15:50:20 UTC+0 Open / Comment

2021-02-13 12:55:59 Hacktivity from a13h1

Bypass Password Authentication to Update the Password
https://hackerone.com/reports/982293
Disclosed at: 2021-02-12 06:41:21 UTC+0
Created at: 2020-09-15 03:32:00 UTC+0 Open / Comment

2021-02-13 12:55:57 Hacktivity from sh3rl0ck\_

Password authentication when changing information bypass\. Bypass of report \#721341
https://hackerone.com/reports/1040373
Disclosed at: 2021-02-11 23:08:27 UTC+0
Created at: 2020-11-22 01:40:47 UTC+0 Open / Comment

2021-01-31 15:34:31 Hacktivity from sh1yo

\[socket\.io\] Cross\-Site Websocket Hijacking
https://hackerone.com/reports/931197
Disclosed at: 2021-01-31 12:33:38 UTC+0
Created at: 2020-07-22 12:04:27 UTC+0 Open / Comment

2021-01-30 07:45:56 Hacktivity from sudi

Reflected XSS in https://www\.intensedebate\.com/js/getCommentLink\.php
https://hackerone.com/reports/1043804
Disclosed at: 2021-01-30 04:45:27 UTC+0
Created at: 2020-11-26 03:44:11 UTC+0 Open / Comment

2021-01-29 15:41:32 Hacktivity from nathand

nextcloud\-snap CircleCI project has vulnerable configuration which can lead to exposing secrets
https://hackerone.com/reports/794407
Disclosed at: 2021-01-29 12:40:33 UTC+0
Created at: 2020-02-12 11:08:18 UTC+0 Open / Comment

2021-01-29 13:11:22 Hacktivity from dgirlwhohacks

Reflected XSS & Open Redirect at mcs main domain
https://hackerone.com/reports/996262
Disclosed at: 2021-01-29 10:11:18 UTC+0
Created at: 2020-10-02 04:06:00 UTC+0 Open / Comment

2021-01-29 11:27:33 Hacktivity from boy\_child\_

Permanent DoS at https://happy\.tools/ when inviting a user
https://hackerone.com/reports/1041173
Disclosed at: 2021-01-29 08:27:05 UTC+0
Created at: 2020-11-23 12:18:41 UTC+0 Open / Comment

2021-01-29 04:33:40 Hacktivity from dawning12

CSRF on api\.my\.games due to improper validation of token allows an attacker to delete other users notifications
https://hackerone.com/reports/1044933
Disclosed at: 2021-01-27 16:56:22 UTC+0
Created at: 2020-11-27 07:51:12 UTC+0 Open / Comment

2021-01-29 04:33:37 Hacktivity from jub0bs

Some build dependencies are downloaded over an insecure channel \(without subsequent integrity checks\)
https://hackerone.com/reports/1042141
Disclosed at: 2021-01-26 16:46:32 UTC+0
Created at: 2020-11-24 11:16:10 UTC+0 Open / Comment