Bug Bounty News Feed Archives - Page 2 of 24

RCE on ingress-nginx-controller via Ingress spec.rules.http.paths.path field

Kubernetes disclosed a bug submitted by ginoah: https://hackerone.com/reports/1620702 - Bounty: $2500 [Source]

Possibility of Deface through translation tool – www.mozilla.com

Mozilla Core Services disclosed a bug submitted by astrounder: https://hackerone.com/reports/2053396 [Source]

Flickr API key leaked in GitHub commit

Mozilla Core Services disclosed a bug submitted by m4y4nk: https://hackerone.com/reports/1992261 [Source]

Smart Pension launches a Vulnerability Disclosure Program on Intigriti

Smart Pension, one of the fastest-growing financial technology companies in the UK, is launching its Vulnerability Disclosure Program (VDP). Ever since Smart Pension’s launch in 2014, they’ve been committed to improving lives for employers and savers in the UK. Founded by Andrew Evans and Will Wynne, they brought together their...

Unreleased Hackerone Copilot is vulnerable to IDOR

HackerOne disclosed a bug submitted by bebiks: https://hackerone.com/reports/2218334 - Bounty: $2500 [Source]

Search input is vulnerable for XSS in qa.td.com and dev.td.com

TD Bank disclosed a bug submitted by allenshaji: https://hackerone.com/reports/1861545 [Source]

Improper Access Control allows OTP bypass

Lark Technologies disclosed a bug submitted by kongwenbin: https://hackerone.com/reports/1948506 [Source]

Code inject via nginx.ingress.kubernetes.io/permanent-redirect annotation

Kubernetes disclosed a bug submitted by jkroepke: https://hackerone.com/reports/2039464 - Bounty: $2500 [Source]

New Search Feature: Search for non-public words in limited disclosure reports

HackerOne disclosed a bug submitted by ahacker1: https://hackerone.com/reports/2213251 [Source]

Accessing apps protected via ZT’s Access when user account is deleted/disabled even after clearing user session/seat

Cloudflare Public Bug Bounty disclosed a bug submitted by suzuka: https://hackerone.com/reports/2122690 - Bounty: $1000 [Source]

Blind SSRF on https://my.exnessaffiliates.com/ allows for internal network enumeration

EXNESS disclosed a bug submitted by null_hypothesis: https://hackerone.com/reports/1832494 - Bounty: $2000 [Source]

Bug Bytes #215 – Hackers in Lisbon, AI bug bounty and is this the end?

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources. This issue covers the week from October 15th to October 22nd...

Citrix Bleed: Leaking Session Tokens with CVE-2023-4966

[Source]

RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044)

[Source]

Hacker email disclosed on submission at hackerone hactivity

HackerOne disclosed a bug submitted by xdemiray: https://hackerone.com/reports/2215434 - Bounty: $100 [Source]

Enhancing the Detectify Crowdsource reward system with more continuous and lucrative payouts

The post Enhancing the Detectify Crowdsource reward system with more continuous and lucrative payouts appeared first on Detectify Labs. [Source]

After the upload of an private file, using transformations, the file becomes public without the possibility of changing it.

Mozilla Critical Services disclosed a bug submitted by limusec: https://hackerone.com/reports/1984060 - Bounty: $1000 [Source]

Information Disclosure FrontPage Configuration Information

U.S. Dept Of Defense disclosed a bug submitted by gu4rdianbyte: https://hackerone.com/reports/2180018 [Source]

HTML Injection at https://stage.firefoxmonitor.nonprod.cloudops.mozgcp.net/user/unsubscribe

Mozilla Core Services disclosed a bug submitted by avram: https://hackerone.com/reports/1913263 [Source]

Responsive Server-side Request Forgery (SSRF)

Nextcloud disclosed a bug submitted by bhmth: https://hackerone.com/reports/1895874 [Source]

Deny Admin from Editing LinkedIn Company Page using Gen Form Visibility via POST /voyager/api/voyagerOrganizationDashCompanies/{id}

LinkedIn disclosed a bug submitted by domg: https://hackerone.com/reports/2081744 [Source]

Hackers two email disclosed on submission at hackerone hactivity

HackerOne disclosed a bug submitted by rynexx: https://hackerone.com/reports/2134874 [Source]

HTML injection at Company Name or Product Name and can be shown on Contact Sales form

LinkedIn disclosed a bug submitted by domg: https://hackerone.com/reports/2076019 [Source]

Bug Bytes #214 – We launch a course, bug hunters go full time and the $20k bug

Open Redirect – Polycom Company Directory

8x8 disclosed a bug submitted by mr-k0anti: https://hackerone.com/reports/1836339 [Source]

[Critical] Curl CVE-2023-38545 vulnerability code changes are disclosed on the internet

curl disclosed a bug submitted by shelldoit: https://hackerone.com/reports/2199174 [Source]

Inviting excessive long email addresses to a calendar event makes the server unresponsive

Nextcloud disclosed a bug submitted by shuvam321: https://hackerone.com/reports/2058337 [Source]

CSRF to XSS in /htdocs/modules/system/admin.php

ImpressCMS disclosed a bug submitted by d3addog: https://hackerone.com/reports/1096123 [Source]

Permission model improperly protects against path traversal

Node.js disclosed a bug submitted by tniessen: https://hackerone.com/reports/2092852 [Source]

Path traversal through path stored in Uint8Array

Node.js disclosed a bug submitted by tniessen: https://hackerone.com/reports/2199818 [Source]

Client Side string length check

Khan Academy disclosed a bug submitted by tomh: https://hackerone.com/reports/1244798 [Source]

Integrity checks according to policies can be circumvented

Node.js disclosed a bug submitted by tniessen: https://hackerone.com/reports/2094235 [Source]

Exposing Django Debug Panel and Sensitive Infrastructure Information at https://dev.fxprivaterelay.nonprod.cloudops.mozgcp.net

Mozilla Core Services disclosed a bug submitted by aliend89: https://hackerone.com/reports/2078707 [Source]