bug bounty

HackerOne Bug Bounty Disclosure: permission-model-improperly-processes-unc-paths-tniessen

Company Name: Node.js Company HackerOne URL: https://hackerone.com/nodejs Submitted By:tniessenLink to Submitters Profile:https://hackerone.com/tniessen Report Title:Permission model improperly processes UNC pathsReport Link:https://hackerone.com/reports/2079103Date...

HackerOne Bug Bounty Disclosure: important-apache-http-server-weakness-with-encoded-question-marks-in-backreferences-cve-orange

Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:orangeLink to Submitters Profile:https://hackerone.com/orange Report Title:important: Apache HTTP Server weakness...

HackerOne Bug Bounty Disclosure: important-apache-http-server-may-use-exploitable-malicious-backend-application-output-to-run-local-handlers-via-internal-redirect-cve-orange

Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:orangeLink to Submitters Profile:https://hackerone.com/orange Report Title:important: Apache HTTP Server may...

HackerOne Bug Bounty Disclosure: important-apache-http-server-weakness-in-mod-rewrite-when-first-segment-of-substitution-matches-filesystem-path-cve-orange

Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:orangeLink to Submitters Profile:https://hackerone.com/orange Report Title:important: Apache HTTP Server weakness...

HackerOne Bug Bounty Disclosure: important-apache-http-server-crash-resulting-in-denial-of-service-in-mod-proxy-via-a-malicious-request-cve-orange

Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:orangeLink to Submitters Profile:https://hackerone.com/orange Report Title:important: Apache HTTP Server: Crash...

HackerOne Bug Bounty Disclosure: path-traversal-in-deeplink-query-parameter-can-expose-any-user-s-private-info-to-a-public-directory-one-click-fr-via

Company Name: Basecamp Company HackerOne URL: https://hackerone.com/basecamp Submitted By:fr4viaLink to Submitters Profile:https://hackerone.com/fr4via Report Title:Path traversal in deeplink query parameter can...

HackerOne Bug Bounty Disclosure: fs-fchown-fchmod-bypasses-permission-model–xpl-r-r

Company Name: Node.js Company HackerOne URL: https://hackerone.com/nodejs Submitted By:4xpl0r3rLink to Submitters Profile:https://hackerone.com/4xpl0r3r Report Title:fsfchown/fchmod bypasses permission modelReport Link:https://hackerone.com/reports/2472071Date Submitted:09 July...

HackerOne Bug Bounty Disclosure: navgraph-confusion-allows-any-p-app-to-send-and-read-requests-from-the-server-at-app-hey-com-fr-via

Company Name: Basecamp Company HackerOne URL: https://hackerone.com/basecamp Submitted By:fr4viaLink to Submitters Profile:https://hackerone.com/fr4via Report Title:Navgraph confusion allows any 3p app to...

HackerOne Bug Bounty Disclosure: incorrect-deep-link-validation-leading-to-unresponsive-application-and-device-fr-via

Company Name: Flickr Company HackerOne URL: https://hackerone.com/flickr Submitted By:fr4viaLink to Submitters Profile:https://hackerone.com/fr4via Report Title:Incorrect Deep-link validation leading to unresponsive application...

HackerOne Bug Bounty Disclosure: authentication-registration-bypass-in-newspack-extended-access-xurizaemon

Company Name: Automattic Company HackerOne URL: https://hackerone.com/automattic Submitted By:xurizaemon0Link to Submitters Profile:https://hackerone.com/xurizaemon0 Report Title:Authentication & Registration Bypass in Newspack Extended...