Bug Bounty

HackerOne Bug Bounty Disclosure: privilege-escalation-in-edit-and-create-secret-endpoints-leads-to-unauthorized-secret-modification–xsom-a

Company Name: Dust Company HackerOne URL: https://hackerone.com/dust Submitted By:0xsom3aLink to Submitters Profile:https://hackerone.com/0xsom3a Report Title:Privilege Escalation in Edit and Create Secret...

HackerOne Bug Bounty Disclosure: non-production-api-endpoints-for-the-ssm-service-fail-to-log-to-cloudtrail-resulting-in-silent-permission-enumeration-nick-frichette-dd

Company Name: AWS VDP Company HackerOne URL: https://hackerone.com/aws_vdp Submitted By:nick_frichette_ddLink to Submitters Profile:https://hackerone.com/nick_frichette_dd Report Title:Non-Production API Endpoints for the ssm...

HackerOne Bug Bounty Disclosure: spamming-highly-nested-json-rpc-requests-cause-node-to-disconnect-from-p-p-network-asurar

Company Name: Monero Company HackerOne URL: https://hackerone.com/monero Submitted By:asurar0Link to Submitters Profile:https://hackerone.com/asurar0 Report Title:Spamming highly nested JSON RPC requests cause...

HackerOne Bug Bounty Disclosure: remote-memory-exhaustion-in-epee-rpc-stack-under-zero-receive-window-sagewilder

Company Name: Monero Company HackerOne URL: https://hackerone.com/monero Submitted By:sagewilder2022Link to Submitters Profile:https://hackerone.com/sagewilder2022 Report Title:Remote memory exhaustion in Epee RPC stack...

HackerOne Bug Bounty Disclosure: a-peer-can-remotely-fill-the-pending-block-queue-to-an-extremely-high-size-with-blocks-that-will-never-leave-the-queue-boog

Company Name: Monero Company HackerOne URL: https://hackerone.com/monero Submitted By:boog900Link to Submitters Profile:https://hackerone.com/boog900 Report Title:A peer can remotely fill the pending...

HackerOne Bug Bounty Disclosure: reflected-xss-vulnerability-in-svg-file-at-area-resources-stg-autodesk-com-ahmednasr

Company Name: Autodesk Company HackerOne URL: https://hackerone.com/autodesk Submitted By:ahmednasr1Link to Submitters Profile:https://hackerone.com/ahmednasr1 Report Title:Reflected XSS Vulnerability in SVG File at...

HackerOne Bug Bounty Disclosure: -csv-injection-in-shared-passwords-leads-to-complete-private-vault-exfiltration-stomper

Company Name: 1Password - Enterprise Password Manager Company HackerOne URL: https://hackerone.com/1password Submitted By:stomper4Link to Submitters Profile:https://hackerone.com/stomper4 Report Title:#**CSV Injection in...

HackerOne Bug Bounty Disclosure: -click-cross-site-scripting-via-custom-configuration-in-safelistsanitizer-leonsirio

Company Name: Ruby on Rails Company HackerOne URL: https://hackerone.com/rails Submitted By:leonsirioLink to Submitters Profile:https://hackerone.com/leonsirio Report Title:1-Click Cross-Site Scripting via Custom...

HackerOne Bug Bounty Disclosure: -part-non-production-api-endpoints-for-the-datazone-service-fail-to-log-to-cloudtrail-resulting-in-silent-permission-enumeration-nick-frichette-dd

Company Name: AWS VDP Company HackerOne URL: https://hackerone.com/aws_vdp Submitted By:nick_frichette_ddLink to Submitters Profile:https://hackerone.com/nick_frichette_dd Report Title:(Part 2) Non-Production API Endpoints for...

HackerOne Bug Bounty Disclosure: django-debug-mode-enabled-information-disclosure-on-api-wwm-dev-autodesk-com-khoof

Company Name: Autodesk Company HackerOne URL: https://hackerone.com/autodesk Submitted By:khoofLink to Submitters Profile:https://hackerone.com/khoof Report Title:Django Debug Mode Enabled - Information Disclosure...

HackerOne Bug Bounty Disclosure: stored-cross-site-scripting-found-in-custom-integration-app-on-hxxps-admin-b-autodesk-com-the-white-evil

Company Name: Autodesk Company HackerOne URL: https://hackerone.com/autodesk Submitted By:the-white-evilLink to Submitters Profile:https://hackerone.com/the-white-evil Report Title:Stored Cross-Site Scripting found in custom integration...