Bug Bounty Channel

2022-06-08 23:37:00 Hacktivity from 3amii

Several Subdomains Takeover
https://hackerone.com/reports/1591085
Disclosed at: 2022-06-08 20:36:30 UTC+0
Created at: 2022-06-04 12:14:40 UTC+0 Open / Comment

2022-06-08 23:36:32 Hacktivity from 3amii

Several Subdomains Takeover
https://hackerone.com/reports/1591085
Disclosed at: 2022-06-08 20:36:30 UTC+0
Created at: 2022-06-04 12:14:40 UTC+0 Open / Comment

2022-06-08 17:08:30 Hacktivity from ooooooo\_q

XSS by clicking Jira's link
https://hackerone.com/reports/1194254
Disclosed at: 2022-06-08 14:07:40 UTC+0
Created at: 2021-05-12 16:10:03 UTC+0 Open / Comment

2022-06-08 17:07:23 Hacktivity from ehhthing

Gitlab Pages token theft using service workers
https://hackerone.com/reports/1439552
Disclosed at: 2022-06-08 14:06:40 UTC+0
Created at: 2022-01-02 21:42:02 UTC+0 Open / Comment

2022-06-08 17:05:14 Hacktivity from joaxcar

"External status checks" can be accepted by users below developer access if the user is either author or assignee of the target merge request
https://hackerone.com/reports/1375393
Disclosed at: 2022-06-08 14:04:26 UTC+0
Created at: 2021-10-20 07:03:56 UTC+0 Open / Comment

2022-06-08 17:03:07 Hacktivity from jarij

Stored XSS on issue comments and other pages which contain notes
https://hackerone.com/reports/1398305
Disclosed at: 2022-06-08 14:02:11 UTC+0
Created at: 2021-11-11 14:55:36 UTC+0 Open / Comment

2022-06-08 15:01:01 Hacktivity from 0x7

Reflected XSS on https://www\.glassdoor\.com/parts/header\.htm
https://hackerone.com/reports/1073712
Disclosed at: 2022-06-08 12:00:45 UTC+0
Created at: 2021-01-07 18:53:07 UTC+0 Open / Comment

2022-06-08 14:46:49 Hacktivity from 0x7

Reflected XSS on https://help\.glassdoor\.com/gd\_requestsubmitpage
https://hackerone.com/reports/1094224
Disclosed at: 2022-06-08 11:46:18 UTC+0
Created at: 2021-02-03 19:24:06 UTC+0 Open / Comment

2022-06-08 14:44:41 Hacktivity from 0x7

Open redirect on https://www\.glassdoor\.com/profile/siwa\.htm via state parameter
https://hackerone.com/reports/1097208
Disclosed at: 2022-06-08 11:44:05 UTC+0
Created at: 2021-02-06 14:55:17 UTC+0 Open / Comment

2022-06-07 17:18:03 Hacktivity from saltyyolk

Path traversal, to RCE
https://hackerone.com/reports/733072
Disclosed at: 2022-06-07 14:16:59 UTC+0
Created at: 2019-11-09 12:03:21 UTC+0 Open / Comment