Bug Bounty Channel

2022-08-10 08:10:04 Hacktivity from jobert

Ability to escape database transaction through SQL injection, leading to arbitrary code execution
https://hackerone.com/reports/1663299
Disclosed at: 2022-08-09 18:58:36 UTC+0
Created at: 2022-08-08 20:20:37 UTC+0 Open / Comment

2022-08-08 16:36:08 Hacktivity from anonymmert12

xmlrpc\.php FILE IS enable it will used for Bruteforce attack and Denial of Service\(DoS\)
https://hackerone.com/reports/1622867
Disclosed at: 2022-08-08 13:35:07 UTC+0
Created at: 2022-07-02 13:13:36 UTC+0 Open / Comment

2022-08-08 09:59:01 Hacktivity from error2001

Lack of Rate limit while joining video call in talk section which is password protected
https://hackerone.com/reports/1596673
Disclosed at: 2022-08-08 06:58:02 UTC+0
Created at: 2022-06-10 08:37:10 UTC+0 Open / Comment

2022-08-07 05:01:54 Hacktivity from codeslayer137

HTTP PUT method is enabled downloader\.ratelimited\.me
https://hackerone.com/reports/545136
Disclosed at: 2022-08-07 02:01:13 UTC+0
Created at: 2019-04-22 13:20:39 UTC+0 Open / Comment

2022-08-07 04:59:46 Hacktivity from codeslayer137

Anonymous access control \- Payments Status
https://hackerone.com/reports/1546726
Disclosed at: 2022-08-07 01:59:29 UTC+0
Created at: 2022-04-21 11:10:23 UTC+0 Open / Comment

2022-08-06 20:38:10 Hacktivity from freskimo

RCE vulnerability in Hyperledger Fabric SDK for Java
https://hackerone.com/reports/801370
Disclosed at: 2022-08-06 17:37:29 UTC+0
Created at: 2020-02-20 23:40:34 UTC+0 Open / Comment

2022-08-06 20:38:04 Hacktivity from mttrbrts

Enrolling to a CA that returns an empty response crashes the node process
https://hackerone.com/reports/506412
Disclosed at: 2022-08-06 17:37:09 UTC+0
Created at: 2019-03-07 20:23:54 UTC+0 Open / Comment

2022-08-06 20:36:57 Hacktivity from xiaoc

Brute Force of fabric\-ca server admin account
https://hackerone.com/reports/411364
Disclosed at: 2022-08-06 17:36:44 UTC+0
Created at: 2018-09-19 07:34:01 UTC+0 Open / Comment

2022-08-06 14:19:47 Hacktivity from alimanshester

cross site scripting in : mtn\.bj
https://hackerone.com/reports/1264834
Disclosed at: 2022-08-06 11:19:10 UTC+0
Created at: 2021-07-16 00:56:05 UTC+0 Open / Comment

2022-08-06 10:14:26 Hacktivity from gaffy

Ingress\-nginx path allows retrieval of ingress\-nginx serviceaccount token
https://hackerone.com/reports/1382919
Disclosed at: 2022-08-06 07:14:09 UTC+0
Created at: 2021-10-27 10:37:06 UTC+0 Open / Comment