Bug Bounty News Feed Archives - Page 2 of 36

PHP info page disclosure in https://41.242.90.8/

MTN Group disclosed a bug submitted by 0xmekky: https://hackerone.com/reports/1848780 [Source]

Reflected cross site scripting (XSS) attacks Reflected XSS attacks,

MTN Group disclosed a bug submitted by 0xmekky: https://hackerone.com/reports/1799197 [Source]

CVE-2010-1429 JBoss Insecure Storage of Sensitive Information on ips.mtn.co.ug

MTN Group disclosed a bug submitted by deb0con: https://hackerone.com/reports/2375659 [Source]

Private data related to program exposed via /reports/.json endpoint to external user participant

HackerOne disclosed a bug submitted by saurabhb: https://hackerone.com/reports/2580982 [Source]

[CVE-2021-44228] Arbitrary Code Execution on ng01-cloud.acronis.com

Acronis disclosed a bug submitted by mikkocarreon: https://hackerone.com/reports/1459714 [Source]

[forum.acronis.com] JNDI Code Injection due an outdated log4j component

Acronis disclosed a bug submitted by godiego: https://hackerone.com/reports/1430622 [Source]

SQL injection in https://demor.adr.acronis.com/ via the username parameter

Acronis disclosed a bug submitted by mmg: https://hackerone.com/reports/1436751 [Source]

MetaMask Browser (on Android) does not enforce Content-Security-Policy header

MetaMask disclosed a bug submitted by renniepak: https://hackerone.com/reports/1941767 [Source]

CVE-2024-7347: Buffer overread in the ngx_http_mp4_module

Internet Bug Bounty disclosed a bug submitted by noentry: https://hackerone.com/reports/2658447 - Bounty: $2142 [Source]

Blind SSRF vulnerability on cz.acronis.com

Acronis disclosed a bug submitted by cabelo: https://hackerone.com/reports/1086206 [Source]

Local Privilege Escalation and Code Execution when restoring files from Quarantine

Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/980500 - Bounty: $250 [Source]

Local Privilege Escalation via DLL Search-Order Hijacking with Cyber Protection Agent – systeminfo.exe utility

Acronis disclosed a bug submitted by mmg: https://hackerone.com/reports/959608 [Source]

Local Privilege Escalation via Backup delete

Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/1003007 - Bounty: $250 [Source]

Local Privilege Escalation using System Clean-up functionality

Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/996576 - Bounty: $250 [Source]

Local Privilege Escalation when updating Acronis True Image

Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/1075449 - Bounty: $250 [Source]

SSRF when configuring Website Backup on Acronis Cloud

Acronis disclosed a bug submitted by mr-medi: https://hackerone.com/reports/1072873 - Bounty: $500 [Source]

Reflected XSS on www.acronis.com/de-de/my/subscriptions/index.html

Acronis disclosed a bug submitted by cabelo: https://hackerone.com/reports/1145712 [Source]

Acronis True Image 2020 Build 22510 Nonstop Backup Service Unquoted service path (privilege escalation)

Acronis disclosed a bug submitted by sanderz31: https://hackerone.com/reports/1083532 [Source]

TrueImage for Acronis True Image 2020 – Untrusted DLL Search-Ordering lead to Privilege Escalation as Administrative account

Acronis disclosed a bug submitted by vanitas: https://hackerone.com/reports/959017 - Bounty: $250 [Source]

Arbitrary Files and Folders Deletion vulnerability with Acronis Managed Machine Service

Acronis disclosed a bug submitted by mmg: https://hackerone.com/reports/959815 [Source]

Local Privilege Escalation via EXE hijacking with Acronis True Image 2021 – Acronis Scheduler2 Service

Acronis disclosed a bug submitted by mmg: https://hackerone.com/reports/971610 [Source]

DLL Hijacking when sending feedback and crash report leading to Privilege Escalation

Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/1008427 - Bounty: $250 [Source]

DLL Hijacking when creating Rescue Media Builder leading to Privilege Escalation

Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/1010552 - Bounty: $250 [Source]

Local Privilege Escalation via EXE hijacking with Acronis True Image 2021 installer

Acronis disclosed a bug submitted by mmg: https://hackerone.com/reports/970739 [Source]

important: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (CVE-2024-40898)

Internet Bug Bounty disclosed a bug submitted by xi4o7unj1e: https://hackerone.com/reports/2612028 - Bounty: $4263 [Source]

HTML injection in swagger UI

Ionity GmbH disclosed a bug submitted by ehaftab: https://hackerone.com/reports/2534300 [Source]

Credentials leaked via Github

Acronis disclosed a bug submitted by sheikh_chilli: https://hackerone.com/reports/1078373 [Source]

Large Amounts of Back-End Acronis Source Code is Publicly Accessible

Acronis disclosed a bug submitted by shadowmap: https://hackerone.com/reports/1008364 - Bounty: $250 [Source]

CSRF and XSS on www.acronis.com

Acronis disclosed a bug submitted by cabelo: https://hackerone.com/reports/961787 [Source]

XSS in https://promo.acronis.com/

Acronis disclosed a bug submitted by yash_: https://hackerone.com/reports/982442 [Source]

Acronis Sync Agent Service – Untrusted DLL Search-Ordering lead to Privilege Escalation

Acronis disclosed a bug submitted by vanitas: https://hackerone.com/reports/924493 - Bounty: $250 [Source]

Local Privilege Escalation when deleting a file from Quarantine

Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/983363 - Bounty: $250 [Source]

Cross Site Scripting (Reflected) on https://www.acronis.cz/dotaznik/roadshow-2020/

Acronis disclosed a bug submitted by darkdream: https://hackerone.com/reports/1081747 - Bounty: $50 [Source]

Local Privilege Escalation via DLL Search-Order Hijacking with Cyber Protection Agent – tibxread.exe utility

Acronis disclosed a bug submitted by mmg: https://hackerone.com/reports/963103 [Source]

DLL Hijacking when performing operations in Acronis Secure Zone partition leading to Privilege Escalation

Acronis disclosed a bug submitted by z3ron3: https://hackerone.com/reports/1004740 - Bounty: $250 [Source]

Jitsi: Bridge Message Spoofing due to Improper JSON Handling leads to Prototype Pollution

8x8 Bounty disclosed a bug submitted by afewgoats: https://hackerone.com/reports/2095061 [Source]

CVE-2024-42005: Potential SQL injection in QuerySet.values() and values_list()

Internet Bug Bounty disclosed a bug submitted by eyalgabay: https://hackerone.com/reports/2646493 - Bounty: $4263 [Source]

Cross-site Scripting (XSS) – Reflected on https://api.mtn.sd/carbon/admin/login.jsp via `msgId` parameter – CVE-2020-17453

MTN Group disclosed a bug submitted by renzi: https://hackerone.com/reports/1158823 [Source]

Remote code injection in Log4j on http://mtn1app.mtncameroon.net – CVE-2021-44228

MTN Group disclosed a bug submitted by renzi: https://hackerone.com/reports/1425563 [Source]

Remote code injection in Log4j on https://mymtn.mtncongo.net – CVE-2021-44228

MTN Group disclosed a bug submitted by renzi: https://hackerone.com/reports/1425565 [Source]

Cross-site Scripting (XSS) – Reflected on http://h1b4e.n2.ips.mtn.co.ug:8080 via Nginx-module

MTN Group disclosed a bug submitted by renzi: https://hackerone.com/reports/1159362 [Source]

Cross-site Scripting (XSS) – Reflected on http://callertunez.mtn.com.gh/wap/noauth/sharedetail.ftl via `callback` parameter

MTN Group disclosed a bug submitted by renzi: https://hackerone.com/reports/1147176 [Source]

[CVE-2024-35176] DoS vulnerability in REXML

Internet Bug Bounty disclosed a bug submitted by mprogrammer: https://hackerone.com/reports/2645836 - Bounty: $2142 [Source]

CVE-2024-38875: Denial-Of-Service through uncontrolled resource consumption caused by poor time complexity of strip_punctuation .

Internet Bug Bounty disclosed a bug submitted by l33thaxor: https://hackerone.com/reports/2591681 - Bounty: $2142 [Source]