Bug Bounty Channel

2022-06-03 20:45:47 Hacktivity from mr\_baka

8ybhy85kld9zp9xf84x6\.imgur\.com Subdomain Takeover
https://hackerone.com/reports/1527405
Disclosed at: 2022-06-03 17:45:44 UTC+0
Created at: 2022-03-31 21:52:51 UTC+0 Open / Comment

2022-06-02 03:50:57 Hacktivity from t0rr3sp3dr0

AWS Load Balancer Controller Managed Security Groups can be replaced by an unprivileged attacker
https://hackerone.com/reports/1238017
Disclosed at: 2022-06-02 00:49:52 UTC+0
Created at: 2021-06-19 05:28:34 UTC+0 Open / Comment

2022-06-02 03:49:50 Hacktivity from t0rr3sp3dr0

AWS Load Balancer Controller can be used by an attacker to modify rules of any Security Group that they are able to tag
https://hackerone.com/reports/1238482
Disclosed at: 2022-06-02 00:49:36 UTC+0
Created at: 2021-06-19 22:14:27 UTC+0 Open / Comment

2022-06-02 00:05:04 Hacktivity from staz0t

Exfiltrate GDrive access token using CSRF
https://hackerone.com/reports/1468010
Disclosed at: 2022-06-01 21:04:40 UTC+0
Created at: 2022-02-02 12:17:24 UTC+0 Open / Comment

2022-06-01 16:53:20 Hacktivity from michag86

user can bypass password enforcement when federated sharing is enabled
https://hackerone.com/reports/838510
Disclosed at: 2022-06-01 13:52:58 UTC+0
Created at: 2020-04-03 21:34:58 UTC+0 Open / Comment

2022-06-01 00:28:43 Hacktivity from omarelfarsaoui

Django debug enabled showing information about system, database, configuration files
https://hackerone.com/reports/1561377
Disclosed at: 2022-05-31 21:28:33 UTC+0
Created at: 2022-05-06 12:35:02 UTC+0 Open / Comment

2022-05-31 22:14:37 Hacktivity from dyls

Deprecated owners\.query API bypasses object view policy
https://hackerone.com/reports/1584409
Disclosed at: 2022-05-31 19:14:20 UTC+0
Created at: 2022-05-28 18:39:07 UTC+0 Open / Comment

2022-05-31 20:16:35 Hacktivity from saajanbhujel

Able to bypass the fix on DOM XSS at \[www\.adobe\.com\]
https://hackerone.com/reports/1398374
Disclosed at: 2022-05-31 17:16:13 UTC+0
Created at: 2021-11-11 17:43:37 UTC+0 Open / Comment

2022-05-31 20:14:27 Hacktivity from saajanbhujel

DOM XSS on www\.adobe\.com
https://hackerone.com/reports/1260825
Disclosed at: 2022-05-31 17:14:15 UTC+0
Created at: 2021-07-13 18:10:39 UTC+0 Open / Comment

2022-05-31 20:06:17 Hacktivity from rodolfomarianocy

CSRF token validation system is disabled on Stripe Dashboard
https://hackerone.com/reports/1493437
Disclosed at: 2022-05-31 17:05:41 UTC+0
Created at: 2022-02-27 20:36:34 UTC+0 Open / Comment