Company Name: EXNESS Company HackerOne URL: https://hackerone.com/exness Submitted By:alexandrioLink to Submitters Profile:https://hackerone.com/alexandrio Report Title:GraphQL attribute Batching DOS can take down...
Company Name: WakaTime Company HackerOne URL: https://hackerone.com/wakatime Submitted By:hasn0xLink to Submitters Profile:https://hackerone.com/hasn0x Report Title:IDOR to view order information of users...
Company Name: HackerOne Company HackerOne URL: https://hackerone.com/security Submitted By:iamboualiLink to Submitters Profile:https://hackerone.com/iambouali Report Title:Inadequate redaction exposes sensitive information via the...
Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:svalkanovLink to Submitters Profile:https://hackerone.com/svalkanov Report Title: Header Parsing leads to...
Company Name: PortSwigger Web Security Company HackerOne URL: https://hackerone.com/portswigger Submitted By:osama-hamadLink to Submitters Profile:https://hackerone.com/osama-hamad Report Title:A user with only permmision...
Company Name: PortSwigger Web Security Company HackerOne URL: https://hackerone.com/portswigger Submitted By:osama-hamadLink to Submitters Profile:https://hackerone.com/osama-hamad Report Title:Changing the administrator password via...
Company Name: HackerOne Company HackerOne URL: https://hackerone.com/security Submitted By:hillybot__Link to Submitters Profile:https://hackerone.com/hillybot__ Report Title:any user could upload attachments to pentest...
Company Name: HackerOne Company HackerOne URL: https://hackerone.com/security Submitted By:darkc0d3Link to Submitters Profile:https://hackerone.com/darkc0d3 Report Title:Possible PII Disclosure via Advanced Vetting Process...
Company Name: HackerOne Company HackerOne URL: https://hackerone.com/security Submitted By:hacktusLink to Submitters Profile:https://hackerone.com/hacktus Report Title:LLM01: Invisible Prompt InjectionReport Link:https://hackerone.com/reports/2372363Date Submitted:13 May...
Company Name: Mattermost Company HackerOne URL: https://hackerone.com/mattermost Submitted By:ramsakal7582Link to Submitters Profile:https://hackerone.com/ramsakal7582 Report Title:Member role which doesn't have permission to...
Company Name: Teleport Company HackerOne URL: https://hackerone.com/teleport Submitted By:mr_asgLink to Submitters Profile:https://hackerone.com/mr_asg Report Title:A member with editor permissions can create...
Company Name: Shipt Company HackerOne URL: https://hackerone.com/shipt Submitted By:doomerhunterLink to Submitters Profile:https://hackerone.com/doomerhunter Report Title:Improper Access Control + Financial fraud allows...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:z3r0yuLink to Submitters Profile:https://hackerone.com/z3r0yu Report Title:Incorrect Type Conversion in interpreting IPv4-mapped IPv6...
Company Name: Node.js Company HackerOne URL: https://hackerone.com/nodejs Submitted By:bpingelLink to Submitters Profile:https://hackerone.com/bpingel Report Title:HTTP Request Smuggling via Content Length ObfuscationReport...
Company Name: Deriv.com Company HackerOne URL: https://hackerone.com/deriv Submitted By:zacianLink to Submitters Profile:https://hackerone.com/zacian Report Title:Mailgun subdomain takeover Report Link:https://hackerone.com/reports/2270082Date Submitted:02 May...
Company Name: IBM Company HackerOne URL: https://hackerone.com/ibm Submitted By:suryahssLink to Submitters Profile:https://hackerone.com/suryahss Report Title:Insecure Direct Object Reference Protection bypass by...
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
