[U.S. Air Force] Information disclosure due unauthenticated access to APIs and system browser functions
U.S. Dept Of Defense disclosed a bug submitted by theinternetofdefcon_: https://hackerone.com/reports/1822160 [Source]
Reflected XSS on .mil
U.S. Dept Of Defense disclosed a bug submitted by alishah: https://hackerone.com/reports/1799562 [Source]
reflected xss in www..gov
U.S. Dept Of Defense disclosed a bug submitted by maskedpersian: https://hackerone.com/reports/1814335 [Source]
XSS on ( .gov ) Via URL path
U.S. Dept Of Defense disclosed a bug submitted by notajax: https://hackerone.com/reports/1825942 [Source]
IDOR for changing privacy settings on any memories
TikTok disclosed a bug submitted by mrhavit: https://hackerone.com/reports/1733627 - Bounty: $5500 [Source]
XSS at TikTok Ads Endpoint
TikTok disclosed a bug submitted by s3c: https://hackerone.com/reports/1683129 - Bounty: $5000 [Source]
Verification process done using different documents without corresponding to user information / User information can be changed after verification
EXNESS disclosed a bug submitted by siddharthamx: https://hackerone.com/reports/1446107 - Bounty: $500 [Source]