Bypassing Whitelist to perform SSRF for internal host scanning
U.S. Department of State disclosed a bug submitted by hollaatm3: https://hackerone.com/reports/1747596 [Source]
DoS at (CVE-2018-6389)
U.S. Dept Of Defense disclosed a bug submitted by pwnesec: https://hackerone.com/reports/1887996 [Source]
Improper Access Control on Media Wiki allows an attackers to restart installation on DoD asset
U.S. Dept Of Defense disclosed a bug submitted by miguel_santareno: https://hackerone.com/reports/1804174 [Source]
Path traversal leads to reading of local files on and
U.S. Dept Of Defense disclosed a bug submitted by rodriguezjorgex: https://hackerone.com/reports/1888808 [Source]
Reflected XSS in
U.S. Dept Of Defense disclosed a bug submitted by 0xd3adc0de: https://hackerone.com/reports/1873655 [Source]
xmlrpc.php file enabled at .org
U.S. Dept Of Defense disclosed a bug submitted by iam_a_jinchuriki: https://hackerone.com/reports/1619536 [Source]
Client side authentication leads to Auth Bypass
U.S. Dept Of Defense disclosed a bug submitted by abhinavsecondary: https://hackerone.com/reports/1877989 [Source]
Reflected XSS in
U.S. Dept Of Defense disclosed a bug submitted by 0xd3adc0de: https://hackerone.com/reports/1882751 [Source]
HAProxy stats panel exposed externally
U.S. Dept Of Defense disclosed a bug submitted by abhinavsecondary: https://hackerone.com/reports/1884372 [Source]
Reflected XSS in
U.S. Dept Of Defense disclosed a bug submitted by 0xd3adc0de: https://hackerone.com/reports/1882754 [Source]