Bug Bounty Channel

2022-06-15 17:58:58 Hacktivity from porcupineyhairs

Golang : Add Query To Detect PAM Authorization Bugs
https://hackerone.com/reports/1597437
Disclosed at: 2022-06-15 14:58:38 UTC+0
Created at: 2022-06-10 20:16:05 UTC+0 Open / Comment

2022-06-15 17:58:52 Hacktivity from porcupineyhairs

Golang : Hardcoded secret used for signing JWT
https://hackerone.com/reports/1595009
Disclosed at: 2022-06-15 14:58:13 UTC+0
Created at: 2022-06-08 14:53:04 UTC+0 Open / Comment

2022-06-15 17:57:45 Hacktivity from ihsinme

CPP: Add query for CWE\-243 Creation of chroot Jail Without Changing Working Directory
https://hackerone.com/reports/1582697
Disclosed at: 2022-06-15 14:57:40 UTC+0
Created at: 2022-05-27 06:56:19 UTC+0 Open / Comment

2022-06-15 13:04:18 Hacktivity from 011alsanosi

Hyper Link Injection while signup
https://hackerone.com/reports/1166073
Disclosed at: 2022-06-15 10:04:14 UTC+0
Created at: 2021-04-15 22:42:45 UTC+0 Open / Comment

2022-06-14 13:22:42 Hacktivity from mega7

HTML Injection in E\-mail
https://hackerone.com/reports/1536899
Disclosed at: 2022-06-14 10:21:46 UTC+0
Created at: 2022-04-10 21:52:52 UTC+0 Open / Comment

2022-06-14 13:21:35 Hacktivity from ub3rsick

Reflected Cross Site Scripting at ColdFusion Debugging Panel http://www\.grouplogic\.com/CFIDE/debug/cf\_debugFr\.cfm
https://hackerone.com/reports/1166918
Disclosed at: 2022-06-14 10:20:47 UTC+0
Created at: 2021-04-16 19:49:43 UTC+0 Open / Comment

2022-06-14 13:20:28 Hacktivity from ub3rsick

Reflected Cross Site Scripting at http://www\.grouplogic\.com/files/glidownload/verify3\.asp \[Uppercase Filter Bypass\]
https://hackerone.com/reports/1167034
Disclosed at: 2022-06-14 10:20:24 UTC+0
Created at: 2021-04-17 03:24:15 UTC+0 Open / Comment

2022-06-14 06:49:36 Hacktivity from windshock

Rails::Html::SafeListSanitizer vulnerable to xss attack in an environment that allows the style tag
https://hackerone.com/reports/1530898
Disclosed at: 2022-06-14 03:49:29 UTC+0
Created at: 2022-04-05 07:34:03 UTC+0 Open / Comment

2022-06-13 10:09:32 Hacktivity from saidkira

lack of rate limit on athentification login page & forgot password page
https://hackerone.com/reports/1591764
Disclosed at: 2022-06-13 07:09:29 UTC+0
Created at: 2022-06-05 16:14:57 UTC+0 Open / Comment

2022-06-12 02:31:13 Hacktivity from dark\_haxor

All user password hash can be seen from admin panel
https://hackerone.com/reports/1489892
Disclosed at: 2022-06-11 23:31:01 UTC+0
Created at: 2022-02-23 14:14:34 UTC+0 Open / Comment