Programme HackerOne Cloudflare Public Bug Bounty Cloudflare Public Bug Bounty Submitted by boy_child_ boy_child_ Report Bypassing creation of API tokens...
Programme HackerOne Nextcloud Nextcloud Submitted by bncrypted bncrypted Report Arbitrary read of all SVG files on a Nextcloud server Full...
Programme HackerOne Nextcloud Nextcloud Submitted by bncrypted bncrypted Report Lack of bruteforce protection for TOTP 2FA Full Report A...
Programme HackerOne Nextcloud Nextcloud Submitted by shakierbellows shakierbellows Report Cards in Deck are readable by any user Full Report ...
Programme HackerOne U.S. Department of State U.S. Department of State Submitted by qualw1n qualw1n Report Accessing unauthorized administration pages and...
Programme HackerOne Nextcloud Nextcloud Submitted by lukasreschke lukasreschke Report Chat room member disclosure via autocomplete API Full Report A...
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by pwnesec pwnesec Report DoS at (CVE-2018-6389) Full Report...
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by 0xd3adc0de 0xd3adc0de Report Reflected XSS in Full Report...
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by iam_a_jinchuriki iam_a_jinchuriki Report xmlrpc.php file enabled at .org...
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by miguel_santareno miguel_santareno Report Improper Access Control on Media...
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by abhinavsecondary abhinavsecondary Report HAProxy stats panel exposed externally...
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by abhinavsecondary abhinavsecondary Report Client side authentication leads to...
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by 0xd3adc0de 0xd3adc0de Report Reflected XSS in Full Report...
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by rodriguezjorgex rodriguezjorgex Report Path traversal leads to reading...
Programme HackerOne U.S. Dept Of Defense U.S. Dept Of Defense Submitted by 0xd3adc0de 0xd3adc0de Report Reflected XSS in Full Report...
Programme HackerOne Uber Uber Submitted by kxyry kxyry Report SSRF in Portainer app lead to access to Internal Docker API...
Programme HackerOne Internet Bug Bounty Internet Bug Bounty Submitted by nyxsorcerer nyxsorcerer Report Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting...
Programme HackerOne Uber Uber Submitted by zhero_ zhero_ Report DOM based XSS via insecure parameter on Full Report A...
Programme HackerOne Uber Uber Submitted by zhero_ zhero_ Report HTML injection via insecure parameter Full Report A considerable amount...
Programme HackerOne Uber Uber Submitted by kxyry kxyry Report Mattermost doesn't check Origin in Websockets, which leads to the Critical...
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by sim4n6 sim4n6 Report Unsafe unpacking using shutil.unpack_archive() query and tests...
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by ihsinme ihsinme Report C/C++: Command injection via wordexp Full Report...
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by porcupineyhairs porcupineyhairs Report Python : Add query to detect PAM...
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by sim4n6 sim4n6 Report TarSlip vulnerability improvements Full Report A...
