1242 matches found
Internet Bug Bounty: (CVE-2023-32006) Permissions policies can impersonate other modules in using module.constructor.createRequire()
A vulnerability was discovered in Node.js that allowed permissions policies to impersonate other modules using the module.constructor.createRequire function. This could bypass the policy mechanism and enable the loading of modules outside of the defined policy. The vulnerability affected all user...
HackerOne: Able to see Bonus amount given to a report even if the bounty and Bonus is not visible to public or mentioned in {Report-Id}.json
A vulnerability allowed users to see the bonus amount given to a report, even if the bounty and bonus were not visible to the public or mentioned in the report's JSON file. This resulted in the exposure of confidential information...
HackerOne: Staff and Triage can modify the initial post of a report, including of already disclosed reports
The initial post of a report on HackerOne could be modified by program members and Triage, allowing them to change the information and potentially manipulate the narrative of the report...
HackerOne: Takeover of hackerone.engineering via Github
The hacker was able to take over the hackerone.engineering domain after a brief misconfiguration window on GitHub. They claimed the domain in their own repository while the DNS records were still pointing towards GitHub. The issue has been resolved and no malware was found on the site during the...
HackerOne: Bypass report submit restriction/ban using the API key
A vulnerability was discovered that allowed banned researchers to submit reports through API keys, bypassing reporting restrictions. By creating an API key after an account was banned from submitting reports, a researcher could still submit reports to programs without restrictions, potentially...
HackerOne: Unauthorized Ticket can be created by an Attacker in user's Helpdesk account
An unauthorized user was able to create tickets in any user's helpdesk account without authorization or knowledge...
aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser
Impact aiohttp v3.8.4 and earlier are bundled with llhttp v6.0.6 which is vulnerable to CVE-2023-30589. The vulnerable code is used by aiohttp for its HTTP request parser when available which is the default case when installing from a wheel. This vulnerability only affects users of aiohttp as an...
Q2-2023 API ThreatStats™ Report: API Exploits Are Everywhere: from NVIDIA to Reddit and more!
Our Q2-2023 API ThreatStats™ report is out. It provides API builders, defenders, breakers, and decision-makers with a comprehensive look at the API security vulnerabilities, threats and exploits reported this past quarter. This report provides everyone involved in API development, security and...
Internet Bug Bounty: [CVE-2023-27531] Possible Deserialization of Untrusted Data vulnerability in Kredis JSON
A deserialization vulnerability was discovered in the Kredis JSON deserialization code, allowing for the potential deserialization of untrusted data. This could result in unexpected objects being deserialized in the system. The vulnerability has been assigned the CVE identifier CVE-2023-27531...
HackerOne: Draft report exposure via slack alerting system for programs
Vulnerability description not provided...
HackerOne: HackerOne Support System Doesn't Require Any Authentication May Lead Unauthorized Action
The HackerOne support system did not require any authentication, allowing anyone to open a support ticket for another user's account. This could potentially lead to unauthorized actions being taken on the account...
HackerOne: Triager/Team members can edit hacker's report and hacker is not even notified
The hacker's report could be edited by a triager or team member without notifying the hacker, compromising the integrity of the report...
Another Critical Unauthenticated SQLi Flaw Discovered in MOVEit Transfer Software
Progress Software has announced the discovery and patching of a critical SQL injection vulnerability in MOVEit Transfer, popular software used for secure file transfer. In addition, Progress Software has patched two other high-severity vulnerabilities. The identified SQL injection vulnerability,...
HackerOne: Usernames still visible on report export pdf despite "I want to redact all usernames" is selected
During a period of approximately one week, a feature was deployed that aimed to redact usernames in the Export PDF function. However, the feature did not account for certain edge cases, resulting in the disclosure of usernames in the exported PDF reports. The vulnerability was identified and...
HackerOne: Hackerone All Private Program Name Leaked to Public Via Collaborator OR Attacker can Easily Dump all Private Program Names through Collaborator
A vulnerability was discovered in Hackerone that allowed an attacker to obtain the names of private programs. By manipulating the report ID and using the Collaborator feature, the attacker could determine if a program was private or public. This compromised the confidentiality of private programs...
HackerOne: inviting collaborator using email disclose the hackerone account related to the user
The new HackerOne collaborator feature allowed users to disclose the HackerOne account associated with an email address without the invitee's interaction...
HackerOne: An attacker can submit a Pentest Opportunity and change the status of the opportunity from submitted to in_review or reviewed
A vulnerability was found where users could create and modify the status of pentest opportunities without going through the intended review process...
HackerOne: RXSS at image.hackerone.live via the `url` parameter
Vulnerability description not provided...
