Programme HackerOne Twitter Twitter Submitted by jub0bs jub0bs Report Chained open redirects and use of Ideographic Full Stop defeat Twitter's...
Programme HackerOne Nextcloud Nextcloud Submitted by spaceraccoon spaceraccoon Report SMTP Command Injection in Appointment Emails via Newlines Full Report A...
Programme HackerOne curl curl Submitted by bagder bagder Report CVE-2022-43552: HTTP Proxy deny use-after-free Full Report A considerable amount of...
Programme HackerOne Linktree Linktree Submitted by twelvesix twelvesix Report Account takeover - improper validation of jwt signature (with regards to...
Programme HackerOne MTN Group MTN Group Submitted by coyemerald coyemerald Report Developer Mistake Full Report A considerable amount of time...
Programme HackerOne Nextcloud Nextcloud Submitted by andyscherzinger andyscherzinger Report Talk Android broadcast receiver is not protected by broadcastPermission allowing malicious...
Programme HackerOne Nextcloud Nextcloud Submitted by tobiaskaminsky tobiaskaminsky Report nextcloudcmd incorrectly trusts bad TLS certificates Full Report A considerable amount...
Programme HackerOne MTN Group MTN Group Submitted by coyemerald coyemerald Report Exposure Of Admin Username & Password Full Report A...
Programme HackerOne MTN Group MTN Group Submitted by netboy netboy Report Information Disclosure Leads To User Data Leak Full Report...
Programme HackerOne Acronis Acronis Submitted by melar_dev melar_dev Report mysql credentials exposed on - https://cz.acronis.com/docker-compose.yml Full Report A considerable amount...
Programme HackerOne Omise Omise Submitted by sim4n6 sim4n6 Report Secret API Key is logged in cleartext Full Report A considerable...
Programme HackerOne Khan Academy Khan Academy Submitted by moom825 moom825 Report xss due to incorrect handling of postmessages Full Report...
Programme HackerOne GitHub GitHub Submitted by ali_shehab ali_shehab Report Managing Pages Full Report A considerable amount of time and effort...
Programme HackerOne Urban Company Urban Company Submitted by musashi42 musashi42 Report Host header injection that bypassed protection and allowed accessing...
Programme HackerOne curl curl Submitted by kurohiro kurohiro Report CVE-2022-43551: Another HSTS bypass via IDN Full Report A considerable amount...
Programme HackerOne Nextcloud Nextcloud Submitted by errorx404 errorx404 Report Missing length validation of user displayname allows to generate an SQL...
Programme HackerOne Nextcloud Nextcloud Submitted by lauritz lauritz Report Stored XSS via Authorization Endpoint - Safari-Only Full Report A considerable...
Programme HackerOne Nextcloud Nextcloud Submitted by lauritz lauritz Report Unencrypted Communications Full Report A considerable amount of time and effort...
Programme HackerOne Khan Academy Khan Academy Submitted by shuvam321 shuvam321 Report Email Verification Bypass Allows Users to Add & verify...
Programme HackerOne Automattic Automattic Submitted by aaroncarson aaroncarson Report Akismet API keys are exposed by authentication method Full Report A...
Programme HackerOne MTN Group MTN Group Submitted by jimmisimon jimmisimon Report Firebase credentials leak Full Report A considerable amount of...
Programme HackerOne Nintendo Nintendo Submitted by rambo6glaz rambo6glaz Report Improper verification of Competition creation allows to create "Official" competitions Full...
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
Programme HackerOne Internet Bug Bounty Internet Bug Bounty Submitted by theinternetofdefcon_ theinternetofdefcon_ Report Electron CVE-2022-35954 Delimiter Injection Vulnerability in exportVariable...
