CVE-2024-42005: Potential SQL injection in QuerySet.values() and values_list()
Internet Bug Bounty disclosed a bug submitted by eyalgabay: https://hackerone.com/reports/2646493 - Bounty: $4263 [Source]
Remote code injection in Log4j on https://mymtn.mtncongo.net – CVE-2021-44228
MTN Group disclosed a bug submitted by renzi: https://hackerone.com/reports/1425565 [Source]
Remote code injection in Log4j on http://mtn1app.mtncameroon.net – CVE-2021-44228
MTN Group disclosed a bug submitted by renzi: https://hackerone.com/reports/1425563 [Source]
Cross-site Scripting (XSS) – Reflected on https://api.mtn.sd/carbon/admin/login.jsp via `msgId` parameter – CVE-2020-17453
MTN Group disclosed a bug submitted by renzi: https://hackerone.com/reports/1158823 [Source]
Cross-site Scripting (XSS) – Reflected on http://callertunez.mtn.com.gh/wap/noauth/sharedetail.ftl via `callback` parameter
MTN Group disclosed a bug submitted by renzi: https://hackerone.com/reports/1147176 [Source]
Cross-site Scripting (XSS) – Reflected on http://h1b4e.n2.ips.mtn.co.ug:8080 via Nginx-module
MTN Group disclosed a bug submitted by renzi: https://hackerone.com/reports/1159362 [Source]