Hackerone Hacktivity Blog Archives

Email verification bypass for manual connection setup service credentials

Nord Security disclosed a bug submitted by yozzo_: https://hackerone.com/reports/2049021 [Source]

Access to resumes applied through LinkedIn Jobs

LinkedIn disclosed a bug submitted by headhunter: https://hackerone.com/reports/560668 [Source]

Hashed data exposure via WebSockets to Workspace Members

Slack disclosed a bug submitted by d3f4u17: https://hackerone.com/reports/1639600 [Source]

AWS keys and user cookie leakage via uninitialized memory leak in outdated librsvg version in Basecamp

Basecamp disclosed a bug submitted by neex: https://hackerone.com/reports/2107680 - Bounty: $8868 [Source]

If rate limit is hit, IP address is leaked to anyone who tries to login

Mozilla Critical Services disclosed a bug submitted by anish_kosaraju: https://hackerone.com/reports/1989901 [Source]

Stored Xss on bugzilla.mozilla.org via comment edit feature from non-admin to admin.

Mozilla Critical Services disclosed a bug submitted by r3dpars3c: https://hackerone.com/reports/2111291 [Source]

NULL Pointer dereference in idn.c

curl disclosed a bug submitted by s0urc3_: https://hackerone.com/reports/2171309 [Source]

IDOR – send a message on behalf of other user

Mozilla Core Services disclosed a bug submitted by lamscun: https://hackerone.com/reports/1888545 [Source]

Improper santization of edit in list feature at twitter leads to delete any twitter user’s list cover photo.

X (Formerly Twitter) disclosed a bug submitted by greytesla: https://hackerone.com/reports/1437004 - Bounty: $560 [Source]

Circuit Breaker Authorization Issue

Cosmos disclosed a bug submitted by strikeout: https://hackerone.com/reports/2120609 - Bounty: $2500 [Source]

Twitter Subscriptions Information Disclosure

X (Formerly Twitter) disclosed a bug submitted by mirhat: https://hackerone.com/reports/2063636 [Source]

2FA BYPASS

Cloudflare Public Bug Bounty disclosed a bug submitted by imtheking: https://hackerone.com/reports/1805779 [Source]

Permanent CASB Integration Takeover due to Improper Access Controls+Confused Deputy Problem

Cloudflare Public Bug Bounty disclosed a bug submitted by suzuka: https://hackerone.com/reports/2086301 - Bounty: $1000 [Source]

XSS with Visual Language Editor tags

Invision Power Services, Inc. disclosed a bug submitted by mpiosik: https://hackerone.com/reports/2031855 [Source]

Unprotected Atlantis Server at https://132.226..

8x8 disclosed a bug submitted by imranhudaa: https://hackerone.com/reports/1895783 [Source]

Potential NULL dereference in libssh’s sftp server

Internet Bug Bounty disclosed a bug submitted by wct: https://hackerone.com/reports/2070810 [Source]

Apache Airflow path traversal by authenticated user

Internet Bug Bounty disclosed a bug submitted by kietna20: https://hackerone.com/reports/2070212 - Bounty: $540 [Source]

Possibility to guess email address from gravatar image URL

RubyGems disclosed a bug submitted by ooooooo_q: https://hackerone.com/reports/1536013 [Source]

Regular Expression Denial of Service (ReDoS) Vulnerability before 2.6.3

Internet Bug Bounty disclosed a bug submitted by hungtd: https://hackerone.com/reports/2068004 - Bounty: $540 [Source]

Able to see Bonus amount given to a report even if the bounty and Bonus is not visible to public or mentioned in {Report-Id}.json

HackerOne disclosed a bug submitted by callmed0_4: https://hackerone.com/reports/2101087 [Source]

CVE-2023-38039: HTTP header allocation DOS

curl disclosed a bug submitted by selmelc: https://hackerone.com/reports/2072338 [Source]

Information Disclosure – Pvt Gitlab Issue Disclosing Through GitLab Unfiltered YouTube channel.

GitLab disclosed a bug submitted by mrrajputhacker2: https://hackerone.com/reports/2097377 - Bounty: $100 [Source]

‘Request English versions of web pages for enhanced privacy’ keeps previous (grayed out) settings

Tor disclosed a bug submitted by andreien: https://hackerone.com/reports/2123957 - Bounty: $200 [Source]

Multiple cross-site scripting (XSS) vulnerabilities in Revive Adserver

Revive Adserver disclosed a bug submitted by l4stb1t: https://hackerone.com/reports/1694171 [Source]

IDOR: Authorization Bypass in LockReport Mutation for public reports

HackerOne disclosed a bug submitted by 0verw4tch: https://hackerone.com/reports/2139190 [Source]

Stored XSS Via Ads Account Name

TikTok disclosed a bug submitted by rioncool22: https://hackerone.com/reports/1647248 - Bounty: $1000 [Source]

SSRF Vulnerability through Connection test feature

Internet Bug Bounty disclosed a bug submitted by sayoojbkumar: https://hackerone.com/reports/2123113 - Bounty: $2550 [Source]

Admin account/panel takeOver and Doing actions in admin panel via DOM-based XSS

Radancy disclosed a bug submitted by mouhannadlrx: https://hackerone.com/reports/1619445 [Source]

Mozilla Mastodon Staging Instance Admin API Key Disclosure Through Slack

Mozilla Core Services disclosed a bug submitted by griffinf: https://hackerone.com/reports/2137154 [Source]

No Rate Limit On Forgot Password Page

Tennessee Valley Authority disclosed a bug submitted by sailesh01nik: https://hackerone.com/reports/1438213 [Source]

Response Manipulation to enable Account recovery key with out current password

Mozilla Critical Services disclosed a bug submitted by saiteja1231323: https://hackerone.com/reports/1995595 [Source]

xss reflected – pq.tva.com

Tennessee Valley Authority disclosed a bug submitted by tvmbug: https://hackerone.com/reports/1362995 [Source]

the domain is truck-admin.eu-east-1.indriverapp.com and Enter the management system of the blasting mobile phone verification code

inDrive disclosed a bug submitted by trustworthy: https://hackerone.com/reports/1991376 [Source]