CVE-2024-7347: Buffer overread in the ngx_http_mp4_module
Internet Bug Bounty disclosed a bug submitted by noentry: https://hackerone.com/reports/2658447 - Bounty: $2142 [Source]
MetaMask Browser (on Android) does not enforce Content-Security-Policy header
MetaMask disclosed a bug submitted by renniepak: https://hackerone.com/reports/1941767 [Source]
Local Privilege Escalation via DLL Search-Order Hijacking with Cyber Protection Agent – systeminfo.exe utility
Acronis disclosed a bug submitted by mmg: https://hackerone.com/reports/959608 [Source]
Local Privilege Escalation and Code Execution when restoring files from Quarantine
Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/980500 - Bounty: $250 [Source]
Blind SSRF vulnerability on cz.acronis.com
Acronis disclosed a bug submitted by cabelo: https://hackerone.com/reports/1086206 [Source]
Local Privilege Escalation when updating Acronis True Image
Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/1075449 - Bounty: $250 [Source]
Local Privilege Escalation using System Clean-up functionality
Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/996576 - Bounty: $250 [Source]
Local Privilege Escalation via Backup delete
Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/1003007 - Bounty: $250 [Source]
Reflected XSS on www.acronis.com/de-de/my/subscriptions/index.html
Acronis disclosed a bug submitted by cabelo: https://hackerone.com/reports/1145712 [Source]
SSRF when configuring Website Backup on Acronis Cloud
Acronis disclosed a bug submitted by mr-medi: https://hackerone.com/reports/1072873 - Bounty: $500 [Source]
Arbitrary Files and Folders Deletion vulnerability with Acronis Managed Machine Service
Acronis disclosed a bug submitted by mmg: https://hackerone.com/reports/959815 [Source]
TrueImage for Acronis True Image 2020 – Untrusted DLL Search-Ordering lead to Privilege Escalation as Administrative account
Acronis disclosed a bug submitted by vanitas: https://hackerone.com/reports/959017 - Bounty: $250 [Source]
Acronis True Image 2020 Build 22510 Nonstop Backup Service Unquoted service path (privilege escalation)
Acronis disclosed a bug submitted by sanderz31: https://hackerone.com/reports/1083532 [Source]
DLL Hijacking when creating Rescue Media Builder leading to Privilege Escalation
Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/1010552 - Bounty: $250 [Source]
DLL Hijacking when sending feedback and crash report leading to Privilege Escalation
Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/1008427 - Bounty: $250 [Source]
Local Privilege Escalation via EXE hijacking with Acronis True Image 2021 – Acronis Scheduler2 Service
Acronis disclosed a bug submitted by mmg: https://hackerone.com/reports/971610 [Source]
Local Privilege Escalation via EXE hijacking with Acronis True Image 2021 installer
Acronis disclosed a bug submitted by mmg: https://hackerone.com/reports/970739 [Source]
HTML injection in swagger UI
Ionity GmbH disclosed a bug submitted by ehaftab: https://hackerone.com/reports/2534300 [Source]
important: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (CVE-2024-40898)
Internet Bug Bounty disclosed a bug submitted by xi4o7unj1e: https://hackerone.com/reports/2612028 - Bounty: $4263 [Source]