BugCrowd

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Clickjacking with reflected xss and redirected to google – By Orange_hacker

April 5, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Auth.Tesla.com Account Takeover of Internal Tesla Accounts – By evanconnelly

April 5, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Linux client – Lack of certificate validation leading to RCE – By mmmdspl

April 3, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Information Disclosure of sensitive data CVE-2017-5487 – By Pikachu_sec

February 27, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – privilege escalation allow the admin to takeover the org by invite the user as owner – By amitkh7888

February 22, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Idor – Access To Private Resumes – By mar0uane

February 3, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Session is not invalidated on password change –> https://my.zapinfo.io – By h_-_cker

February 3, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Email Html Injection @https://gigs.indeed.com/ – By pphreak_1001

February 3, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Improper Authorization – Second (Additional) Driver can list “add-driver” invitation links – By sagarparmar121

January 14, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – I found a text injection – By Orange_hacker

January 11, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Authorized drivers can disable remote monitoring – By KLWTTS

December 15, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Reflected Cross Site Scripting (XSS) on https://gamemaker.io/account/dashboard – By abitsec

December 7, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – HTML Injection > licensing.fcc.gov‏‏‏‏‏‏‏‏‏‏ – By Naplon

December 5, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Vulnerable to Log4j – By Ractiurd

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Information Disclosure of sensitive data CVE-2017-5487 – By technoking

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Reflected XSS – By mewtw0

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – HTML Injection in meeting owner email – By mega7

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – HTML Injection in email when deactivate a user – By mega7

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Open Redirect On login Page – By RizwanSiDdiqu1

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Session fixation – By cyber_ritik

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Failed to validate Session after Password Change. – By cyber_ritik

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Publisher owner doesn’t able to delete low privilege user – By AlWaYsHuNt

November 28, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

BugCrowd

BugCrowd Bug Bounty Disclosure: – Clickjacking with reflected xss and redirected to google – By Orange_hacker

BugCrowd Bug Bounty Disclosure: – Auth.Tesla.com Account Takeover of Internal Tesla Accounts – By evanconnelly

BugCrowd Bug Bounty Disclosure: – Linux client – Lack of certificate validation leading to RCE – By mmmdspl

BugCrowd Bug Bounty Disclosure: – Information Disclosure of sensitive data CVE-2017-5487 – By Pikachu_sec

BugCrowd Bug Bounty Disclosure: – privilege escalation allow the admin to takeover the org by invite the user as owner – By amitkh7888

BugCrowd Bug Bounty Disclosure: – Idor – Access To Private Resumes – By mar0uane

BugCrowd Bug Bounty Disclosure: – Session is not invalidated on password change –> https://my.zapinfo.io – By h_-_cker

BugCrowd Bug Bounty Disclosure: – Email Html Injection @https://gigs.indeed.com/ – By pphreak_1001

BugCrowd Bug Bounty Disclosure: – Improper Authorization – Second (Additional) Driver can list “add-driver” invitation links – By sagarparmar121

BugCrowd Bug Bounty Disclosure: – I found a text injection – By Orange_hacker

BugCrowd Bug Bounty Disclosure: – Authorized drivers can disable remote monitoring – By KLWTTS

BugCrowd Bug Bounty Disclosure: – Reflected Cross Site Scripting (XSS) on https://gamemaker.io/account/dashboard – By abitsec

BugCrowd Bug Bounty Disclosure: – HTML Injection > licensing.fcc.gov‏‏‏‏‏‏‏‏‏‏ – By Naplon

BugCrowd Bug Bounty Disclosure: – Vulnerable to Log4j – By Ractiurd

BugCrowd Bug Bounty Disclosure: – Information Disclosure of sensitive data CVE-2017-5487 – By technoking

BugCrowd Bug Bounty Disclosure: – Reflected XSS – By mewtw0

BugCrowd Bug Bounty Disclosure: – HTML Injection in meeting owner email – By mega7

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

BugCrowd Bug Bounty Disclosure: – HTML Injection in email when deactivate a user – By mega7

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

BugCrowd Bug Bounty Disclosure: – Open Redirect On login Page – By RizwanSiDdiqu1

BugCrowd Bug Bounty Disclosure: – Session fixation – By cyber_ritik

BugCrowd Bug Bounty Disclosure: – Failed to validate Session after Password Change. – By cyber_ritik

BugCrowd Bug Bounty Disclosure: – Publisher owner doesn’t able to delete low privilege user – By AlWaYsHuNt

CVE Alert: CVE-2025-6915

CVE Alert: CVE-2025-45143

CVE Alert: CVE-2025-6917

CVE Alert: CVE-2025-6925

CVE Alert: CVE-2025-6916

You may have missed