Bug Bounty Channel

2022-06-17 11:50:25 Hacktivity from er\_salil

CSRF Bypassed on Logout Endpoint
https://hackerone.com/reports/1091403
Disclosed at: 2022-06-17 08:50:20 UTC+0
Created at: 2021-01-31 20:39:59 UTC+0 Open / Comment

2022-06-17 11:45:16 Hacktivity from akashhamal0x01

Race condition via project team member invitation system\.
https://hackerone.com/reports/1108291
Disclosed at: 2022-06-17 08:44:28 UTC+0
Created at: 2021-02-21 13:33:54 UTC+0 Open / Comment

2022-06-16 22:03:29 Hacktivity from happykira0x1

xmlrpc file enabled
https://hackerone.com/reports/1575401
Disclosed at: 2022-06-16 19:02:47 UTC+0
Created at: 2022-05-19 09:29:41 UTC+0 Open / Comment

2022-06-16 18:15:28 Hacktivity from iylz

curl "globbing" can lead to denial of service attacks
https://hackerone.com/reports/1572120
Disclosed at: 2022-06-16 15:14:32 UTC+0
Created at: 2022-05-16 15:19:36 UTC+0 Open / Comment

2022-06-16 07:27:29 Hacktivity from marvelmaniac

CSRF \(protection bypassed\) to force a below 18 user into viewing an nsfw subreddit \!
https://hackerone.com/reports/1480569
Disclosed at: 2022-06-16 04:27:02 UTC+0
Created at: 2022-02-14 09:59:51 UTC+0 Open / Comment

2022-06-16 04:58:15 Hacktivity from aidilarf\_2000

XSS STORED at https://webcast\.tiktokv\.com/ Via Create Live Event in \`Description\` Form
https://hackerone.com/reports/1542703
Disclosed at: 2022-06-16 01:58:09 UTC+0
Created at: 2022-04-16 15:59:27 UTC+0 Open / Comment

2022-06-16 00:10:15 Hacktivity from sachinrajput

Rate limit Bypass on contact\-us through IP Rotator \(burp extension\)\(https://www\.linkedin\.com/help/linkedin/solve/contact\)
https://hackerone.com/reports/1578121
Disclosed at: 2022-06-15 21:10:06 UTC+0
Created at: 2022-05-22 09:04:00 UTC+0 Open / Comment

2022-06-15 23:01:37 Hacktivity from saiful6601

Delete direct message history without access the proper conversation\_id
https://hackerone.com/reports/1487804
Disclosed at: 2022-06-15 20:01:04 UTC+0
Created at: 2022-02-21 19:34:29 UTC+0 Open / Comment

2022-06-15 23:01:31 Hacktivity from max2x

Remote 0click exfiltration of Safari user's IP address
https://hackerone.com/reports/1392211
Disclosed at: 2022-06-15 20:00:43 UTC+0
Created at: 2021-11-05 07:01:11 UTC+0 Open / Comment

2022-06-15 21:18:33 Hacktivity from suryasnn

The software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more su
https://hackerone.com/reports/1591504
Disclosed at: 2022-06-15 18:18:31 UTC+0
Created at: 2022-06-05 05:14:29 UTC+0 Open / Comment