bangaloreallergycentre.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031698 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting bangaloreallergycentre.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines ...

cimambiente.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031262 Security Researcher whitehatewizard Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting cimambiente.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines o...

files.viviennerogers.info GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031204 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting files.viviennerogers.info website and its users. Following coordinated and responsible vulnerability disclosure guidelines o...

mediacapital.group GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031135 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting mediacapital.group website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the I...

vulcan-steel.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031121 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting vulcan-steel.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO...

losangelesdreamrentals.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1031085 Security Researcher Hacker Helped patch 4 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting losangelesdreamrentals.com website and its users. Followin...

cretanmedicare.gr GDPR PII Exposure vulnerability

Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting cretanmedicare.gr website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bount...

comxepto.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1025398 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

projetos.prime.cv GDPR PII Exposure vulnerability

Security Researcher karthi Helped patch 5 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting projetos.prime.cv website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Boun...

photoenvision.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1021834 Security Researcher offensi74555475 Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting photoenvision.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines...

macs.hw.ac.uk GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1021824 Security Researcher offensi74555475 Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting macs.hw.ac.uk website and its users. Following coordinated and responsible vulnerability disclosure guidelines of...

monitor.somafm.com GDPR PII Exposure vulnerability

Open Bug Bounty ID: OBB-1020579 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

U.S. Government, Military Personnel Data Leaked By Autoclerk

A leaky database owned by reservations management system Autoclerk has exposed the personal data and travel information for thousands of users – including U.S. government and military personnel. Autoclerk, which was acquired by the Best Western Hotel and Resorts Group in August, provides...

U.S. Dept Of Defense: [HTA2] Receiving████ access request on @wearehackerone.com email address

Hi, Description I'm not exactly sure what happened, but it seems that my researcher email [email protected] has been added in a group that receives new user access request from MIDRP. ████████ ██████████ Steps to reproduce I'm honestly not sure what happened. I did test a few .███...

ftp.metu.edu.tr GDPR PII Exposure vulnerability

Security Researcher h1yusuf Helped patch 3 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting ftp.metu.edu.tr website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bount...

GiveWp < 2.5.5 - Authentication Bypass

The weakness allowed unauthenticated users to bypass API authentication methods and potentially access personally identifiable user information PII like names, addresses, IP addresses, and email addresses which should not be publicly accessible...

U.S. Dept Of Defense: SSN leak due to editable slides

Summary: A presentation slide contains a screenshot of a records brief which contains an SSN Description: The slides try to redact the PII of the records with a blue block but we can remove it by editing the slides to remove the offending blue block Impact Critical Step-by-step Reproduction...

U.S. Dept Of Defense: PII leakage due to scrceenshot of health records

Summary: Document shows a screenshot of a medical record for a soldier Description: One of the slides describes the CIV and PAD DSN along with some information relating to the soldier such as their name, the information appears to be old but could be still be an issue if they're in service Impact...

vyfakturuj.cz GDPR PII Exposure vulnerability

Security Researcher DakkarKey Helped patch 406 vulnerabilities Received 6 Coordinated Disclosure badges Received 14 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting vyfakturuj.cz website and its users. Following coordinate...

Starbucks: China – Limited Partner PII Regarding Work Scheduling via Unauthenticated API Endpoint

0xpatrik discovered an unauthenticated API endpoint that allowed retrieval of specified work leave dates of designated Starbucks employees in China. @0xpatrik — thank you for reporting the original vulnerability and for confirming the resolution...