Bug Bounty Channel

2022-06-07 17:17:57 Hacktivity from saltyyolk

Steal private objects of other projects via project import
https://hackerone.com/reports/743953
Disclosed at: 2022-06-07 14:16:42 UTC+0
Created at: 2019-11-22 04:52:22 UTC+0 Open / Comment

2022-06-07 17:16:49 Hacktivity from saltyyolk

Private objects exposed through project import
https://hackerone.com/reports/767770
Disclosed at: 2022-06-07 14:16:30 UTC+0
Created at: 2020-01-03 16:39:54 UTC+0 Open / Comment

2022-06-07 17:16:42 Hacktivity from saltyyolk

Path traversal in Nuget Package Registry
https://hackerone.com/reports/822262
Disclosed at: 2022-06-07 14:16:20 UTC+0
Created at: 2020-03-17 15:51:58 UTC+0 Open / Comment

2022-06-07 13:20:31 Hacktivity from ub3rsick

Store Admin Page Accessible Without Authentication at http://www\.grouplogic\.com/ADMIN/store/index\.cfm
https://hackerone.com/reports/1164854
Disclosed at: 2022-06-07 10:20:01 UTC+0
Created at: 2021-04-14 12:46:44 UTC+0 Open / Comment

2022-06-07 12:26:45 Hacktivity from ub3rsick

Stored Cross Site Scripting at http://www\.grouplogic\.com/ADMIN/store/index\.cfm?fa=disprocode
https://hackerone.com/reports/1164853
Disclosed at: 2022-06-07 09:25:48 UTC+0
Created at: 2021-04-14 12:41:19 UTC+0 Open / Comment

2022-06-07 02:11:29 Hacktivity from h1ugroon

Misconfigurated login page able to lock login action for any account without user interaction
https://hackerone.com/reports/1582778
Disclosed at: 2022-06-06 23:10:51 UTC+0
Created at: 2022-05-27 10:17:28 UTC+0 Open / Comment

2022-06-06 14:32:04 Hacktivity from bismillahfortuner

2 Cache Poisoning Attack Methods Affect Core Functionality www\.exodus\.com
https://hackerone.com/reports/1581454
Disclosed at: 2022-06-06 11:31:15 UTC+0
Created at: 2022-05-25 22:45:22 UTC+0 Open / Comment

2022-06-06 09:17:42 Hacktivity from rptl

Registered users contact information disclosure on salesforce lightning endpoint https://disposal\.gsa\.gov
https://hackerone.com/reports/1443654
Disclosed at: 2022-06-06 06:17:37 UTC+0
Created at: 2022-01-07 19:55:02 UTC+0 Open / Comment

2022-06-05 23:59:50 Hacktivity from nyymi

Heap overflow via HTTP/2 PUSH\_PROMISE
https://hackerone.com/reports/1589847
Disclosed at: 2022-06-05 20:59:34 UTC+0
Created at: 2022-06-02 15:29:52 UTC+0 Open / Comment

2022-06-05 23:58:43 Hacktivity from nyymi

KRB\-FTP: Security level downgrade
https://hackerone.com/reports/1590102
Disclosed at: 2022-06-05 20:58:34 UTC+0
Created at: 2022-06-02 20:58:34 UTC+0 Open / Comment