bug bounty

HackerOne Bug Bounty Disclosure: unauthenticated-lfi-local-file-inclusion-using-the-symbol-at-the-target-hxxps–xym

Company Name: U.S. Dept Of Defense Company HackerOne URL: https://hackerone.com/deptofdefense Submitted By:0xymLink to Submitters Profile:https://hackerone.com/0xym Report Title:Unauthenticated LFI (Local File...

HackerOne Bug Bounty Disclosure: lack-of-rate-limiting-in-hxxps-pki-passreset-aspx-leads-to-pii-disclosure-and-potential-account-takeover-hypervis-r

Company Name: U.S. Dept Of Defense Company HackerOne URL: https://hackerone.com/deptofdefense Submitted By:hypervis0rLink to Submitters Profile:https://hackerone.com/hypervis0r Report Title:Lack of rate limiting...

HackerOne Bug Bounty Disclosure: memory-leak-in-bytes-to-hexstring-function-hackergandhi

Company Name: Hyperledger Company HackerOne URL: https://hackerone.com/hyperledger Submitted By:hackergandhiLink to Submitters Profile:https://hackerone.com/hackergandhi Report Title:Memory Leak in bytes_to_hexstring FunctionReport Link:https://hackerone.com/reports/2779070Date Submitted:24...

HackerOne Bug Bounty Disclosure: race-condition-leads-to-add-more-than-email-at-data-breaches-monitor-system-at-hxxps-stage-firefoxmonitor-nonprod-cloudops-mozgcp-net-sushantd

Company Name: Mozilla Company HackerOne URL: https://hackerone.com/mozilla Submitted By:sushantd19Link to Submitters Profile:https://hackerone.com/sushantd19 Report Title:Race condition leads to add more than...

HackerOne Bug Bounty Disclosure: unauthenticated-wordpress-database-repair-dos-wshadow

Company Name: WordPress Company HackerOne URL: https://hackerone.com/wordpress Submitted By:wshadowLink to Submitters Profile:https://hackerone.com/wshadow Report Title:Unauthenticated WordPress Database Repair DoSReport Link:https://hackerone.com/reports/2786591Date Submitted:18...

HackerOne Bug Bounty Disclosure: circular-based-introspetion-query-leading-to-single-request-denial-of-service-and-cost-consumption-and-query-cost-on-api-sorare-com-graphql-thebeast

Company Name: Sorare Company HackerOne URL: https://hackerone.com/sorare Submitted By:thebeast99Link to Submitters Profile:https://hackerone.com/thebeast99 Report Title:Circular based introspetion Query leading to single...

HackerOne Bug Bounty Disclosure: idor-vulnerability-leads-to-deleting-message-after-leaving-getting-banned-from-group-using-message-id-yash

Company Name: Rocket.Chat Company HackerOne URL: https://hackerone.com/rocket_chat Submitted By:yash24Link to Submitters Profile:https://hackerone.com/yash24 Report Title:IDOR vulnerability leads to Deleting message after...

HackerOne Bug Bounty Disclosure: dos-taking-down-a-k-users-gitlab-ee-instance-or-multiple-sidekiq-instances-by-importing-a-malicious-repo-from-a-github-ee-self-hosted-server-a

Company Name: GitLab Company HackerOne URL: https://hackerone.com/gitlab Submitted By:a92847865Link to Submitters Profile:https://hackerone.com/a92847865 Report Title:DOS: taking down a 1k users Gitlab...