Potential IP revealing using UNC Path in Windows File Picker
October 8, 2023 Internet Bug Bounty disclosed a bug submitted by haxatron1: https://hackerone.com/reports/2104567 [Source]
View moreOctober 8, 2023 Internet Bug Bounty disclosed a bug submitted by haxatron1: https://hackerone.com/reports/2104564 [Source]
View moreOctober 8, 2023 Internet Bug Bounty disclosed a bug submitted by tniessen: https://hackerone.com/reports/2091137 – Bounty: $2540 [Source]
View moreOctober 8, 2023 WordPress disclosed a bug submitted by tanvir0x: https://hackerone.com/reports/1927360 [Source]
View moreOctober 7, 2023 HackerOne disclosed a bug submitted by imranhudaa: https://hackerone.com/reports/2069593 – Bounty: $2500 [Source]
View moreOctober 6, 2023 LinkedIn disclosed a bug submitted by mainteemoforfun: https://hackerone.com/reports/1538177 [Source]
View moreOctober 6, 2023 Informatica disclosed a bug submitted by mtk0308: https://hackerone.com/reports/39069 [Source]
View moreOctober 5, 2023 Mozilla Core Services disclosed a bug submitted by d0xing: https://hackerone.com/reports/2017323 [Source]
View moreOctober 5, 2023 Mozilla Core Services disclosed a bug submitted by d0xing: https://hackerone.com/reports/2135054 [Source]
View moreOctober 5, 2023 inDrive disclosed a bug submitted by h1xploit: https://hackerone.com/reports/2078527 [Source]
View moreOctober 5, 2023 LY Corporation disclosed a bug submitted by tosun: https://hackerone.com/reports/1167272 [Source]
View moreOctober 5, 2023 So you’ve decided that your business or organization should launch a bug bounty program, a great first step in taking the leap into crowdsourced vulnerability reporting. While choosing how and where to host your program can be an exciting time, the options can also become confusing and overwhelming. You might…
View moreOctober 5, 2023 Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources. This issue covers the week from September 25th to October 1st…
View moreOctober 4, 2023 We are beyond excited to announce that we are joining forces with TCM Security to educate the next generation of bug bounty talent! Over the past few months, we have collaborated on an interactive online course that covers everything one needs to know to get started in bug bounty, from…
View moreOctober 1, 2023 Internet Bug Bounty disclosed a bug submitted by mattaustin: https://hackerone.com/reports/2078581 – Bounty: $3495 [Source]
View moreSeptember 30, 2023 LinkedIn disclosed a bug submitted by find_me_here: https://hackerone.com/reports/1808149 [Source]
View moreSeptember 30, 2023 U.S. Dept Of Defense disclosed a bug submitted by unexpectedbuffercon_: https://hackerone.com/reports/2126039 [Source]
View moreSeptember 30, 2023 U.S. Dept Of Defense disclosed a bug submitted by xandsz: https://hackerone.com/reports/2143411 [Source]
View moreSeptember 30, 2023 U.S. Dept Of Defense disclosed a bug submitted by testingforbugs: https://hackerone.com/reports/1681178 [Source]
View moreSeptember 30, 2023 U.S. Dept Of Defense disclosed a bug submitted by unexpectedbuffercon_: https://hackerone.com/reports/2126954 [Source]
View moreSeptember 29, 2023 Mattermost disclosed a bug submitted by zerodivisi0n: https://hackerone.com/reports/1502099 – Bounty: $150 [Source]
View moreSeptember 29, 2023 Since its inception, Yahoo’s Bug Bounty program has received thousands of vulnerability reports from over 6,000 hackers worldwide. And today, the ten-year-old program is growing with an expansion into Europe through a new public program managed by Intigriti, the continent’s largest bug bounty platform. To celebrate the launch, Yahoo is…
View moreSeptember 28, 2023 Liberapay disclosed a bug submitted by ma_hunter: https://hackerone.com/reports/2125346 [Source]
View moreSeptember 28, 2023 Internet Bug Bounty disclosed a bug submitted by selmelc: https://hackerone.com/reports/2146691 – Bounty: $2540 [Source]
View moreSeptember 28, 2023 Mozilla Core Services disclosed a bug submitted by mikey96: https://hackerone.com/reports/2171494 [Source]
View moreSeptember 28, 2023 Mozilla Core Services disclosed a bug submitted by unexpectedbuffercon_: https://hackerone.com/reports/1879548 [Source]
View moreSeptember 28, 2023 Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources. This issue covers the week from September 18th to September 24th…
View moreSeptember 27, 2023 Nextcloud disclosed a bug submitted by themarkib0x0: https://hackerone.com/reports/1832126 [Source]
View moreSeptember 27, 2023 Nextcloud disclosed a bug submitted by cyber_world_01: https://hackerone.com/reports/2052795 [Source]
View moreSeptember 27, 2023 Nextcloud disclosed a bug submitted by shuvam321: https://hackerone.com/reports/2050059 [Source]
View moreSeptember 27, 2023 Nextcloud disclosed a bug submitted by krrish_hackk: https://hackerone.com/reports/1901396 [Source]
View moreSeptember 26, 2023 LinkedIn disclosed a bug submitted by find_me_here: https://hackerone.com/reports/1809633 [Source]
View moreSeptember 26, 2023 LinkedIn disclosed a bug submitted by headhunter: https://hackerone.com/reports/878724 [Source]
View moreSeptember 26, 2023 LinkedIn disclosed a bug submitted by vampirex: https://hackerone.com/reports/1943608 [Source]
View moreSeptember 23, 2023 LinkedIn disclosed a bug submitted by headhunter: https://hackerone.com/reports/560668 [Source]
View moreSeptember 23, 2023 Nord Security disclosed a bug submitted by yozzo_: https://hackerone.com/reports/2049021 [Source]
View moreSeptember 22, 2023 Slack disclosed a bug submitted by d3f4u17: https://hackerone.com/reports/1639600 [Source]
View moreSeptember 22, 2023 Basecamp disclosed a bug submitted by neex: https://hackerone.com/reports/2107680 – Bounty: $8868 [Source]
View moreSeptember 22, 2023 Here are 10 easy ways to get started with bug bounty hunting for free: Participate in public bug bounty programs. There are a number of public bug bounty programs that you can participate in for free. These programs are typically run by open source projects or non-profit organizations. One example…
View moreSeptember 22, 2023 The following is a list of the top 10 bug bounty sites in 2023, based on a combination of factors including popularity, reputation, and rewards offered: OpenBugBountyHackerOneBugcrowdIntigritiYesWeHackCobaltSynackImmunefiHackerXHackenproof These sites offer a variety of bug bounty programs from companies of all sizes, from startups to Fortune 500 companies. The rewards offered…
View moreSeptember 21, 2023 Mozilla Critical Services disclosed a bug submitted by anish_kosaraju: https://hackerone.com/reports/1989901 [Source]
View moreSeptember 21, 2023 curl disclosed a bug submitted by s0urc3_: https://hackerone.com/reports/2171309 [Source]
View moreSeptember 21, 2023 Mozilla Critical Services disclosed a bug submitted by r3dpars3c: https://hackerone.com/reports/2111291 [Source]
View moreSeptember 21, 2023 Mozilla Core Services disclosed a bug submitted by lamscun: https://hackerone.com/reports/1888545 [Source]
View moreSeptember 19, 2023 X (Formerly Twitter) disclosed a bug submitted by greytesla: https://hackerone.com/reports/1437004 – Bounty: $560 [Source]
View moreSeptember 19, 2023 X (Formerly Twitter) disclosed a bug submitted by mirhat: https://hackerone.com/reports/2063636 [Source]
View moreSeptember 19, 2023 Cosmos disclosed a bug submitted by strikeout: https://hackerone.com/reports/2120609 – Bounty: $2500 [Source]
View moreSeptember 19, 2023 Cloudflare Public Bug Bounty disclosed a bug submitted by suzuka: https://hackerone.com/reports/2086301 – Bounty: $1000 [Source]
View moreSeptember 19, 2023 Cloudflare Public Bug Bounty disclosed a bug submitted by imtheking: https://hackerone.com/reports/1805779 [Source]
View moreSeptember 19, 2023 OpenBugBounty is a non-profit bug bounty platform established in 2014. It is a platform for coordinated, responsible, and ISO 29147 compatible vulnerability disclosure. OpenBugBounty allows security researchers to report XSS and similar security vulnerabilities on any website they discover using non-intrusive security testing techniques. The researchers may choose to make…
View more