Hackerone – CyberWar.ro

[Bug Bounty Money] – Episode 7

May 29, 2023 by TheNewbie

XSS vulnerability without a content security bypass in a `CUSTOM` App through Button tag , 2,000 USD Possible XSS vulnerability without a content security bypass, 2,000 USD download file type warning on Windows does not appear if “ask where to save file before downloading” setting is enabled, 500 USD Reset password link sent over unsecured … Read more

[Bug Bounty Money] – Episode 6 – Week 17 / 2023

July 6, 2023May 1, 2023 by TheNewbie

Authentication bypass on gist.github.com through SSH Certificates, 10,000 USD
The `io.kubernetes.client.util.generic.dynamic.Dynamics` contains a code execution vulnerability due to SnakeYAML, 1,000 USD
ReDoS( Ruby, Time), 4,000 USD
Blind SSRF to internal services in matrix preview_link API, 6,000 USD
Desktop client does not verify received singed certificate in end to end encryption, 1,000 USD
Information disclosure by sending a GIF, 500 USD

[Bug Bounty Money] – Episode 5 – Week 16 / 2023

May 1, 2023April 20, 2023 by TheNewbie

CSRF protection on OIDC login is broken, 500 USD JWT audience claim is not verified, 8000 USD RichText parser vulnerability in scheduled posts allows XSS, 5000 USD Increase Rank on Bugcrowd Platform., 900 USD

Semne de carte: Hacktivity by Hackerone

June 14, 2018 by TheNewbie

https://hackerone.com/hacktivity?sort_type=latest_disclosable_activity_at&filter=type%3Apublic&page=1&range=forever