Apple will now pay hackers up to $1 million for reporting vulnerabilities

Apple has just updated the rules of its bug bounty program by announcing a few major changes during a briefing at the annual Black Hat security conference yesterday. One of the most attractive updates is… Apple has enormously increased the maximum reward for its bug bounty program from $200,000 t...

Zomato: [api.zomato.com] Able to manipulate order amount

@pasw discovered an interesting find where he was able to manipulate the order amount. This was a creative find and we rewarded @pasw with double bounty + promotional bonus of $2,500...

BonusToken Integer Overflow Vulnerability

bonusToken BNS is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of BNS. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Threat Outbreak Alert RuleID32774: Email Messages Distributing Malicious Software on May 14, 2018

Medium Alert ID: 57891 First Published: 2018 May 14 13:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32774 may contain the following files: Name | Size...

Vend VDP: Race Condition : Exploiting the loyalty claim https://xxx.vendhq.com/loyalty/claim/email/xxxxx url and gain x amount of loyalty bonus/cash

Hey Team! I love loyalty bonuses, that turns first time users into returning customers , but sometimes loyalty can be exploited, just like in this chase. LT:DR A firtstime loyalty customer will get x times the amount of loyalty bonus from the story by racing the loyalty link x amount of times in...

Uber: Hack The World 2017 Top 2 Bonus

Thanks for your participation in Hack the World 2017, @nutellite!...

michigan.secondchancebonuszone.com XSS vulnerability

Vulnerable URL: https://michigan.secondchancebonuszone.com/goldenticket/feedback.php/%22onmouseover%3d'prompt/OPENBUGBOUNTY/'bad%3d%22 Details: Description| Value ---|--- Patched:| Yes, at 17.10.2017 Latest check for patch:| 17.10.2017 14:03 GMT Vulnerability type:| XSS Vulnerability status:|...

LocalTapiola: Sql injection on /webApp/sijoituswebinaari (viestinta.lahitapiola.fi)

Issue The reporter found a blind SQL Injection attack in an application in viestinta.lahitapiola.fi. Fix The issue was investigated and found to be valid. The fix was to remove the application as it was not needed. Reasoning The reported case was valid and within the scope of the bug bounty...

Hollywood Bonus Casino - Free! - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hollywood Bonus Casino - Free! published at the 'play' market has multiple vulnerabilities...

Princess Bonus Casino - Free! - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Princess Bonus Casino - Free! published at the 'play' market has multiple vulnerabilities...

Buffalo Bonus Casino Free Slot - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Buffalo Bonus Casino Free Slot published at the 'play' market has multiple vulnerabilities...

SLOTS BLAZE - free with Bonus! - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SLOTS BLAZE - free with Bonus! published at the 'play' market has multiple vulnerabilities...

Yoints - Die Bonus App - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yoints - Die Bonus App published at the 'play' market has multiple vulnerabilities...

Banc D'Binary - 100% bonus - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Banc D'Binary - 100% bonus published at the 'play' market has multiple vulnerabilities...

Uber Bug Bounty Rewards Loyalty, Promises Transparency

Uber’s bug bounty program emerged from private beta mode yesterday, which it used as a feedback forum for participants in order to develop the public program. “This was pretty unique in its approach,” said HackerOne CTO Alex Rice. Uber’s program is built on the HackerOne platform, and Uber...

Mail.ru: SSRF/XSPA [parapa.mail.ru] 2

Blind SSRF in parapa.mail.ru on the moment of reporting, Ext.B scope was not covered by bug bounty program, the bounty was awarded as a bonus...

Yahoo repair mailbox vulnerability, the researchers receive a million dollar bonus-vulnerability warning-the black bar safety net

! Currently Yahoo repair a can be attacker for hijacking the user's mailbox vulnerability. The vulnerability is hazards heavier According to the latest news that Yahoo has to fix theXSSvulnerabilities, earlier, a malicious attacker can exploit the vulnerability to send malicious mail, then you ca...

Microsoft Bounty Programs Expansion - Bounty for Defense, Authentication Bonus, and RemoteApp

I am very pleased to be releasing additional expansions of the Microsoft Bounty Programs. Please stop by the Microsoft Networking Lounge at Black Hat, August 5-6, to learn more about these programs; or, visit https://aka.ms/BugBounty. We are raising the Bounty for Defense maximum from $50,000 USD...

LinkedIn Private Bug Bounty Program Goes Public

Public-facing bug bounties are the shiny new bauble of computer security. And with good reason since in most cases, companies that start their own bounties or go through a third-party platform provider are able to take advantage of a pool of skilled contributors, patch products, and improve...

White hat found YouTube any video remove the vulnerability, the Google award 5 0 0 0 $ -bug-warning-the black bar safety net

Russian security researcher Kamil Hismatullin recently found YouTube there is a logical vulnerability by the vulnerability, users can delete the YouTube of any video. In the vulnerabilities submitted to the official after Hismatullin get Google 5 0 0 0 $ bonus. FreeBuf science: a Google...