Password and mail address stored unencrypted in memory – Rockstar Game Launcher
Rockstar Games disclosed a bug submitted by sirr0n: https://hackerone.com/reports/1128357 - Bounty: $750 [Source]
CVE-2023-40611: Apache Airflow Dag Runs Broken Access Control Vulnerability
Internet Bug Bounty disclosed a bug submitted by happyhacking123: https://hackerone.com/reports/2144868 [Source]
Unauthorized Access to Deleted Interviews on Glassdoor Platform
Glassdoor disclosed a bug submitted by frankcadillac: https://hackerone.com/reports/2212555 [Source]
Race condition in up voting and down voting
Urban Dictionary disclosed a bug submitted by flashdisk: https://hackerone.com/reports/183837 [Source]
Possibility of Deface through translation tool – www.mozilla.com
Mozilla Core Services disclosed a bug submitted by astrounder: https://hackerone.com/reports/2053396 [Source]
RCE on ingress-nginx-controller via Ingress spec.rules.http.paths.path field
Kubernetes disclosed a bug submitted by ginoah: https://hackerone.com/reports/1620702 - Bounty: $2500 [Source]
Flickr API key leaked in GitHub commit
Mozilla Core Services disclosed a bug submitted by m4y4nk: https://hackerone.com/reports/1992261 [Source]
Smart Pension launches a Vulnerability Disclosure Program on Intigriti
Smart Pension, one of the fastest-growing financial technology companies in the UK, is launching its Vulnerability Disclosure Program (VDP). Ever since Smart Pension’s launch in 2014, they’ve been committed to improving lives for employers and savers in the UK. Founded by Andrew Evans and Will Wynne, they brought together their...