Month: August 2024

HackerOne Bug Bounty Disclosure: dll-hijacking-when-performing-operations-in-acronis-secure-zone-partition-leading-to-privilege-escalation-z-ron

Company Name: Acronis Company HackerOne URL: https://hackerone.com/acronis Submitted By:z3ron3Link to Submitters Profile:https://hackerone.com/z3ron3 Report Title:DLL Hijacking when performing operations in Acronis...

HackerOne Bug Bounty Disclosure: acronis-sync-agent-service-untrusted-dll-search-ordering-lead-to-privilege-escalation-vanitas

Company Name: Acronis Company HackerOne URL: https://hackerone.com/acronis Submitted By:vanitasLink to Submitters Profile:https://hackerone.com/vanitas Report Title:Acronis Sync Agent Service - Untrusted DLL...

HackerOne Bug Bounty Disclosure: jitsi-bridge-message-spoofing-due-to-improper-json-handling-leads-to-prototype-pollution-afewgoats

Company Name: 8x8 Bounty Company HackerOne URL: https://hackerone.com/8x8-bounty Submitted By:afewgoatsLink to Submitters Profile:https://hackerone.com/afewgoats Report Title:Jitsi: Bridge Message Spoofing due to...

HackerOne Bug Bounty Disclosure: local-privilege-escalation-via-dll-search-order-hijacking-with-cyber-protection-agent-tibxread-exe-utility-mmg

Company Name: Acronis Company HackerOne URL: https://hackerone.com/acronis Submitted By:mmgLink to Submitters Profile:https://hackerone.com/mmg Report Title:Local Privilege Escalation via DLL Search-Order Hijacking...

HackerOne Bug Bounty Disclosure: cross-site-scripting-reflected-on-hxxps-www-acronis-cz-dotaznik-roadshow-darkdream

Company Name: Acronis Company HackerOne URL: https://hackerone.com/acronis Submitted By:darkdreamLink to Submitters Profile:https://hackerone.com/darkdream Report Title:Cross Site Scripting (Reflected) on hXXps://wwwacroniscz/dotaznik/roadshow-2020/Report Link:https://hackerone.com/reports/1081747Date...