November 21, 2022 - BugBountyBlog.com

Open redirect that can lead to malicious websites

AMBER AI disclosed a bug submitted by mrdot404: https://hackerone.com/reports/1771749 [Source]

Dependecy Confusion via Lookup Request Forwarding to PyPi.org

GitLab disclosed a bug submitted by usd-responsible-disclosure: https://hackerone.com/reports/1681275 [Source]

No rate limiting for Remove Account lead to huge Mass mailings

Weblate disclosed a bug submitted by tanvir_0x: https://hackerone.com/reports/1723445 [Source]

Reflected XSS in chatbot

MTN Group disclosed a bug submitted by roland_hack: https://hackerone.com/reports/1735622 [Source]

Open Redirect at

U.S. Dept Of Defense disclosed a bug submitted by angeltsvetkov: https://hackerone.com/reports/1634105 [Source]

IDOR on [HtUS]

U.S. Dept Of Defense disclosed a bug submitted by nightm4re: https://hackerone.com/reports/1627974 [Source]

Reflected XSS | https://

U.S. Dept Of Defense disclosed a bug submitted by x3ph_: https://hackerone.com/reports/1736432 [Source]

Reflected XSS | https://

U.S. Dept Of Defense disclosed a bug submitted by x3ph_: https://hackerone.com/reports/1736433 [Source]

LOGJ4 VUlnerability [HtUS]

U.S. Dept Of Defense disclosed a bug submitted by fklet: https://hackerone.com/reports/1624137 - Bounty: $1000 [Source]

Default password on 34.120.209.175

Elastic disclosed a bug submitted by newspaper: https://hackerone.com/reports/1415241 - Bounty: $245 [Source]

Directory Listing at https://…

8x8 disclosed a bug submitted by shuvam321: https://hackerone.com/reports/1771051 [Source]

API tokens and Emails leaked lead to sensitive information Disclosure

ZeroBounce disclosed a bug submitted by devdevirl: https://hackerone.com/reports/1776711 [Source]

CSRF in AppSearch allows creation of “curations”

Elastic disclosed a bug submitted by dee-see: https://hackerone.com/reports/1477050 - Bounty: $833 [Source]

[Git Gud] GitHub.com Svnbridge memcached deserialization vulnerability chain leading to Remote Code Execution

GitHub disclosed a bug submitted by ajxchapman: https://hackerone.com/reports/1593913 - Bounty: $17500 [Source]

Ability to bypass locked Cloudflare WARP on wifi networks.

Cloudflare Public Bug Bounty disclosed a bug submitted by joshatmotion: https://hackerone.com/reports/1635748 - Bounty: $1000 [Source]

RCE via github import

GitLab disclosed a bug submitted by yvvdwf: https://hackerone.com/reports/1672388 - Bounty: $33510 [Source]

CSP-bypass XSS in project settings page

GitLab disclosed a bug submitted by yvvdwf: https://hackerone.com/reports/1588732 - Bounty: $10270 [Source]

XSS: `v-safe-html` is not safe enough

GitLab disclosed a bug submitted by yvvdwf: https://hackerone.com/reports/1579645 - Bounty: $6580 [Source]

New /add_contacts /remove_contacts quick commands susseptible to XSS from Customer Contact firstname/lastname fields

GitLab disclosed a bug submitted by cryptopone: https://hackerone.com/reports/1578400 - Bounty: $13950 [Source]

Open redirect at mc-beta-cloud-acronis.com

Acronis disclosed a bug submitted by angeltsvetkov: https://hackerone.com/reports/846389 [Source]

Admin can create a hidden admin account which even the owner can not detect and remove and do administrative actions on the application.

Reddit disclosed a bug submitted by 41bin: https://hackerone.com/reports/1596663 - Bounty: $5000 [Source]

Subdomain takeover at http://test.www.midigator.com

Equifax disclosed a bug submitted by valluvarsploit_h1: https://hackerone.com/reports/1718371 [Source]

Subdomain Takeover on delivey.yelp.com

Yelp disclosed a bug submitted by racersaravanaa05: https://hackerone.com/reports/1715538 [Source]

Business Suite “Get Leads” Resulting in Revealing User Email & Phone

TikTok disclosed a bug submitted by datph4m: https://hackerone.com/reports/1744194 - Bounty: $5500 [Source]

sensitive data exposure

Reddit disclosed a bug submitted by saibalajis6: https://hackerone.com/reports/1716249 [Source]

api keys leaked

Reddit disclosed a bug submitted by saibalajis6: https://hackerone.com/reports/1762927 [Source]

Host Header Injection Attack – www.xnxx.com

XVIDEOS disclosed a bug submitted by cyber_anon: https://hackerone.com/reports/1630073 [Source]

EU sets out plan for Cyber Defence Policy

EURACTIV [Source]

Self-XSS on Suggest Tag dialog box

XVIDEOS disclosed a bug submitted by j3rry4unt: https://hackerone.com/reports/1761505 - Bounty: $50 [Source]

Safeguarding publishers with innovative bug bounty program: Echobox partners with YesWeHack

WHAT'S NEW IN PUBLISHING [Source]

Apache Flink RCE via GET jar/plan API Endpoint

Aiven Ltd disclosed a bug submitted by jarij: https://hackerone.com/reports/1418891 - Bounty: $6000 [Source]

Kafka Connect RCE via connector SASL JAAS JndiLoginModule configuration

Aiven Ltd disclosed a bug submitted by jarij: https://hackerone.com/reports/1529790 - Bounty: $5000 [Source]

Grafana RCE via SMTP server parameter injection

Aiven Ltd disclosed a bug submitted by jarij: https://hackerone.com/reports/1200647 - Bounty: $5000 [Source]

[Kafka Connect] [JdbcSinkConnector][HttpSinkConnector] RCE by leveraging file upload via SQLite JDBC driver and SSRF to internal Jolokia

Aiven Ltd disclosed a bug submitted by jarij: https://hackerone.com/reports/1547877 - Bounty: $5000 [Source]