Able to see highest poll result without voting or view result
FetLife disclosed a bug submitted by deepblue29: https://hackerone.com/reports/2248116 [Source]
debug.log File Exposure that exposes (user/) username and password at
Mars disclosed a bug submitted by skoll101: https://hackerone.com/reports/2122938 [Source]
subdomain takeover at
Mars disclosed a bug submitted by skoll101: https://hackerone.com/reports/2106886 [Source]
**”CSRF Vulnerability in Royal Canin Website Allows Attackers to Change User Profile Picture at my.royalcanin.pt”**
Mars disclosed a bug submitted by bx00: https://hackerone.com/reports/2144870 [Source]
reflected xss in https://wordpress.com/start/account/user
Automattic disclosed a bug submitted by secureighty: https://hackerone.com/reports/2055132 [Source]
Buffer overflow and affected url:-https://github.com/curl/curl/blob/master/docs/examples/hsts-preload.c
curl disclosed a bug submitted by cyberguardianrd: https://hackerone.com/reports/2252307 [Source]
OAuth2 client_secret stored in plain text in the database
Nextcloud disclosed a bug submitted by rullzer: https://hackerone.com/reports/1994324 - Bounty: $100 [Source]