HackerOne: Disclosure of the name of a program that has a private part with an external link

Summary: Hi team , @jobert , @bencode . Not so long ago, you made an output to the program panel of information about whether the program has the function- retest. Also, this is reflected in the report by the attribute activeretestsubscription. It seems that it is reflected in publish reports tha...

HackerOne: Unauthorized user can obtain `report_sources` attribute through Team GraphQL object

Summary: Hi team. And Happy New Year! Description: If I am not mistaken, then through this parameter we can define private programs with an external link. If this parameter is not empty, then the program is private. - "HackerOne Platform" Steps To Reproduce https://hackerone.com/graphql POST:...

Valve: Steam chat - trade offer presentation vulnerability

It was possible to construct a Steam URL that began with "/tradeoffer/new" and included valid partner and token information, but which was in fact an external link. The crafted URL would be treated by the Steam Chat UI as a trade offer and given special visual treatment...

lesserg4mini.cs.umass.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1006509 Security Researcher devl00p Helped patch 3000 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting lesserg4mini.cs.umass.ed...

External Links Filter - Moderately critical - Open Redirect Vulnerability - SA-CONTRIB-2019-063

The External Link Filter module provides an input filter that replaces external links by a local link that redirects to the target URL. The module did not have protection for the Redirect URL to go where content authors intended...

CVE-2019-7061

creationtimestamp| type| source ---|---|--- 2019-05-23 18:48:22+00:00| seen| https://t.me/cvemitreorg/236...

SQL injection vulnerability in the background us***.php page of TreeHole's external link system

Treehole external link system is a free and open source PHP external link network disk system. Treehole external link system background us.php page SQL injection vulnerability , the vulnerability stems from the failure to effectively filter the variable search, attackers can use the vulnerability...

HackerOne: Disclosing a private program in an external link if program is paused

Summary: Hi team Description: If the program is paused that we will not be able to send reports to this program and if we try to directly contact the link https://hackerone.com/externalprogrammpaused/reports/new we will be returned to the main page https://hackerone.com/externalprogrammpaused Ste...

xn--l-qhua1eb1221cowtc71chia.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-652350 Description| Value ---|--- Affected Website:| xn--l-qhua1eb1221cowtc71chia.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

sangokugassen.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-651274 Description| Value ---|--- Affected Website:| sangokugassen.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sao-if.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-650851 Description| Value ---|--- Affected Website:| sao-if.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

granblue.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-650833 Description| Value ---|--- Affected Website:| granblue.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

finaltreasure.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-650821 Description| Value ---|--- Affected Website:| finaltreasure.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

yurukamie.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-650584 Description| Value ---|--- Affected Website:| yurukamie.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sims3.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-649128 Description| Value ---|--- Affected Website:| sims3.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ma4981.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-648849 Description| Value ---|--- Affected Website:| ma4981.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bravelygatewiki.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-648008 Description| Value ---|--- Affected Website:| bravelygatewiki.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

atoriemugi.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-647872 Description| Value ---|--- Affected Website:| atoriemugi.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

senjyushi.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-647646 Description| Value ---|--- Affected Website:| senjyushi.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bulletforcewiki.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-647629 Description| Value ---|--- Affected Website:| bulletforcewiki.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...