Bruteforce protection can be bypassed with misconfigured proxy

None...

Calendar app returns full stacktrace when an error happens while editing appointment

None...

Liberapay: Avatar URL is exposed in patron export for secret donations

The avatar URL was exposed in the patron export for secret donations, which could potentially identify donors who wished to remain anonymous...

HackerOne: How the Arch Angel stole Live Events

A vulnerability in a live hacking event's infrastructure allowed an attacker to impersonate an administrator, close valid bug reports, and disrupt the event. The attacker was able to log in as an administrator and invalidate bug reports, but the event proceeded successfully regardless...

Internet Bug Bounty: curl HSTS long file name clears contents

When saving HSTS data using curl, a vulnerability was found where using an excessively long file name could result in the clearing of all contents. This caused subsequent requests using that file to be unaware of the HSTS status they should have used. The reason was that curl appended a suffix to...

Brave Android 1.61.100 Security Fixes

Fixed crash when incorrectly handling reward navigation redirects as reported on HackerOne by 0xc4gr1. Upgraded Chromium to 120.0.6099.62 — refer to Google Chrome advisories for inherited CVEs...

HackerOne: Cloud Computer Hackerone Triager can be Accessible for everyone [[email protected]] computer

Vulnerability description not provided...

HackerOne: Server Side Request Forgery (SSRF) via Analytics Reports

We recently received a critical server-side request forgery SSRF vulnerability report through our bug bounty program. The issue allowed attackers to make internal requests from our application servers by exploiting a lack of output sanitization in an error message. By crafting malicious requests,...

Users can make external storage mount points inaccessible for other users

None...

user_ldap app logs user passwords in the log file on level debug

None...

Can enable/disable birthday calendar for any user

None...

Server-Side Request Forgery (SSRF) in Mail app

None...

Admins can change authentication details of user configured external storage

None...

HackerOne: [hackerone.com] Program's old handles are not blacklisted like usernames and allows reclaim over past handles for potential abuse

Vulnerability description not provided...

HackerOne: Private program name disclosure in the invitation mail for another program

A private program name was disclosed in an invitation email for another program...

Internet Bug Bounty: Permission model improperly protects against path traversal in Node.js 20

A path traversal vulnerability was introduced in Node.js 20 due to insufficient patching of CVE-2023-30584. The vulnerability arises because the permission model implementation does not protect itself against the application overwriting built-in utility functions like path.resolve with user-defin...

HackerOne: IDOR vulnerability in unreleased HackerOne Copilot feature

An unreleased feature of HackerOne's Copilot was vulnerable to IDOR through a GraphQL mutation. By supplying another user's conversation ID, an attacker could have deleted conversations in the Copilot interface before this issue was addressed...

HackerOne: Hacker email disclosed on submission at hackerone hactivity

Vulnerability description not provided...

Hackerone: CVE-2023-38545 SOCKS5 heap buffer overflow

...

HackerOne: New Search Feature: Search for non-public words in limited disclosure reports

A vulnerability was discovered that allowed an attacker to search for words in limited disclosure vulnerability reports on HackerOne and see if the word existed in the full report, rather than just the limited disclosure portion. This could potentially allow secrets contained within a full report...