XSS vulnerability without a content security bypass in a `CUSTOM` App through Button tag , 2,000 USD Possible XSS vulnerability without a content security bypass, 2,000 USD download file type warning on Windows does not appear if “ask where to save file before downloading” setting is enabled, 500 USD Reset password link sent over unsecured … Read more
CSRF protection on OIDC login is broken, 500 USD JWT audience claim is not verified, 8000 USD RichText parser vulnerability in scheduled posts allows XSS, 5000 USD Increase Rank on Bugcrowd Platform., 900 USD
Deschidem seria de programe Bug Bounty cu singura companie romaneasca despre care stim ca are asa ceva: Bitdefender. Ce credeam initial ca e lista lunga de domenii “in scope” .. am constatat ca e lista “out of scope”. Programul lor e administrat prin Bugcrowd. De pe Bugcrowd aflam mai multe informatii: – recompensele sunt intre … Read more