Bug Bounty

HackerOne Bug Bounty Disclosure: host-header-injection-internal-qa-delivery-indrive-com-mega

Company Name: inDrive Company HackerOne URL: https://hackerone.com/indrive Submitted By:mega9Link to Submitters Profile:https://hackerone.com/mega9 Report Title:Host Header Injection - internalqadeliveryindrivecomReport Link:https://hackerone.com/reports/2076786Date Submitted:12...

HackerOne Bug Bounty Disclosure: xmlrpc-php-wp-cron-php-files-are-enabled-and-will-used-for-ddos-dos-and-broutforce-users-attack-cyber-tech

Company Name: Nextcloud Company HackerOne URL: https://hackerone.com/nextcloud Submitted By:cyber-techLink to Submitters Profile:https://hackerone.com/cyber-tech Report Title:xmlrpcphp &wp-cronphp files are enabled, and will...

HackerOne Bug Bounty Disclosure: idor-on-graphql-queries-billingdocumentdownload-and-billdetails-blaklis

Company Name: Shopify Company HackerOne URL: https://hackerone.com/shopify Submitted By:blaklisLink to Submitters Profile:https://hackerone.com/blaklis Report Title:IDOR on GraphQL queries BillingDocumentDownload and BillDetailsReport...

HackerOne Bug Bounty Disclosure: account-creation-with-invalid-email-addresses-email-is-accepting-and-d-a-line-termination-chars-resett-r

Company Name: HackerOne Company HackerOne URL: https://hackerone.com/security Submitted By:resett3rLink to Submitters Profile:https://hackerone.com/resett3r Report Title:Account creation with invalid email addresses /...

HackerOne Bug Bounty Disclosure: hackerone-saml-signup-domain-enforcement-bypass-results-in-unauthorized-access-to-hackerone-pullrequest-organization–xacb

Company Name: HackerOne Company HackerOne URL: https://hackerone.com/security Submitted By:0xacbLink to Submitters Profile:https://hackerone.com/0xacb Report Title:HackerOne SAML signup domain enforcement bypass results...

HackerOne Bug Bounty Disclosure: b-memory-corruption-via-large-pixels-b-mr-r-boot

Company Name: b'Infogram' Company HackerOne URL: https://hackerone.com/infogram Submitted By:b'mr_r3boot'Link to Submitters Profile:https://hackerone.com/b'mr_r3boot' Report Title:b'Memory Corruption via Large Pixels'Report Link:https://hackerone.com/reports/282518Date Submitted:01...

HackerOne Bug Bounty Disclosure: b-default-credentials-at-https-b-forcedrofes

Company Name: b'Trellix' Company HackerOne URL: https://hackerone.com/trellix Submitted By:b'forcedrofes'Link to Submitters Profile:https://hackerone.com/b'forcedrofes' Report Title:b'default credentials at https://52.42.105.71/'Report Link:https://hackerone.com/reports/2160178Date Submitted:01 February...

HackerOne Bug Bounty Disclosure: b-port-smpt-open-can-send-any-mail-remotely-from-the-internal-mail-users-to-company-mail-id-s-b-harshniture

Company Name: b'SideFX' Company HackerOne URL: https://hackerone.com/sidefx Submitted By:b'harshniture12'Link to Submitters Profile:https://hackerone.com/b'harshniture12' Report Title:b"Port 587 SMPT Open: Can send any...