Bug Bounty

HackerOne Bug Bounty Disclosure: creation-of-bounties-through-customer-api-leads-to-private-email-disclosure–verw-tch

Company Name: HackerOne Company HackerOne URL: https://hackerone.com/security Submitted By:0verw4tchLink to Submitters Profile:https://hackerone.com/0verw4tch Report Title:Creation of bounties through Customer API leads...

HackerOne Bug Bounty Disclosure: authentication-bypass-with-usage-of-presignedurl-kolokokop

Company Name: ownCloud Company HackerOne URL: https://hackerone.com/owncloud Submitted By:kolokokopLink to Submitters Profile:https://hackerone.com/kolokokop Report Title:Authentication Bypass with usage of PreSignedURLReport Link:https://hackerone.com/reports/2337427Date...

HackerOne Bug Bounty Disclosure: attacker-can-add-itself-as-admin-user-and-can-also-change-privileges-of-existing-users-dishant-singh

Company Name: U.S. Dept Of Defense Company HackerOne URL: https://hackerone.com/deptofdefense Submitted By:dishant_singhLink to Submitters Profile:https://hackerone.com/dishant_singh Report Title:Attacker can Add itself...

HackerOne Bug Bounty Disclosure: improper-authentication-login-without-registration-with-any-user-at-archyxsec

Company Name: U.S. Dept Of Defense Company HackerOne URL: https://hackerone.com/deptofdefense Submitted By:archyxsecLink to Submitters Profile:https://hackerone.com/archyxsec Report Title:Improper Authentication (Login without...

HackerOne Bug Bounty Disclosure: -leaking-pii-of-tour-visitors-names-email-addresses-phone-numbers-via-misconfigured-record-permissions-oxylis

Company Name: U.S. Dept Of Defense Company HackerOne URL: https://hackerone.com/deptofdefense Submitted By:oxylisLink to Submitters Profile:https://hackerone.com/oxylis Report Title: leaking PII of...

HackerOne Bug Bounty Disclosure: patch-method-manipulation-allowing-the-users-to-escalate-their-functionalities-and-edit-upgrade-downgrade-api-keys-settings-which-is-not-allowed-bugsv

Company Name: Frontegg Company HackerOne URL: https://hackerone.com/frontegg Submitted By:bugsv2Link to Submitters Profile:https://hackerone.com/bugsv2 Report Title:PATCH method manipulation allowing the users to...

HackerOne Bug Bounty Disclosure: bypassing-the-block-of-security-domain-restriction-and-normally-invite-blocked-domains-with-special-characters-bugsv

Company Name: Frontegg Company HackerOne URL: https://hackerone.com/frontegg Submitted By:bugsv2Link to Submitters Profile:https://hackerone.com/bugsv2 Report Title:Bypassing the block of Security Domain Restriction...

HackerOne Bug Bounty Disclosure: steal-any-user-in-your-orgs-private-github-token-by-pointing-the-gh-integration-at-an-attacker-controlled-ghe-instance-archangel

Company Name: New Relic Company HackerOne URL: https://hackerone.com/newrelic Submitted By:archangelLink to Submitters Profile:https://hackerone.com/archangel Report Title:Steal any user in your orgs...

HackerOne Bug Bounty Disclosure: missing-authorization-check-on-view-permissions-for-alerting-conditions-via-internal-api-accounts-xxxxxxx-policies-yyyyyyy-conditions-offs-endpoint-archangel

Company Name: New Relic Company HackerOne URL: https://hackerone.com/newrelic Submitted By:archangelLink to Submitters Profile:https://hackerone.com/archangel Report Title:Missing Authorization check on View permissions...

HackerOne Bug Bounty Disclosure: user-without-view-modify-delete-permissions-on-destinations-can-view-modify-delete-destinations-archangel

Company Name: New Relic Company HackerOne URL: https://hackerone.com/newrelic Submitted By:archangelLink to Submitters Profile:https://hackerone.com/archangel Report Title:User without "View/Modify/Delete" permissions on "Destinations"...

HackerOne Bug Bounty Disclosure: github-app-link-takeover-listed-on-hxxps-docs-doppler-com-docs-github-actions-page-w-shi

Company Name: Doppler Company HackerOne URL: https://hackerone.com/doppler Submitted By:w3shiLink to Submitters Profile:https://hackerone.com/w3shi Report Title:Github app(link) Takeover Listed on "hXXps://docsdopplercom/docs/github-actions" pageReport...