Arbitrary write in the application’s data folder and arbitrary read of server’s replies from 3rd party apps.
Basecamp disclosed a bug submitted by fr4via: https://hackerone.com/reports/1710541 - Bounty: $1000 [Source]
Attachment in published HackerOne report exposure private program
HackerOne disclosed a bug submitted by mateuszek: https://hackerone.com/reports/1869613 - Bounty: $500 [Source]
Biometric key is stored in Windows Credential Manager, accessible to other local unprivileged processes
Bitwarden disclosed a bug submitted by mebeim: https://hackerone.com/reports/1874155 [Source]
Cloudflare CASB Confused Deputy Problem
Cloudflare Public Bug Bounty disclosed a bug submitted by albertspedersen: https://hackerone.com/reports/1952124 - Bounty: $3300 [Source]
Our latest integration – Slack
We’re happy to share that Intigriti now integrates with Slack, a top business communication tool used widely across industries. This feature allows automatic updates to be posted to your Slack channels whenever specified events take place. This enhancement streamlines your workflow and increases the efficiency of your vulnerability coordination process. ...