The Uber platform coming out of authentication vulnerabilities, exploit the vulnerability can reset any account password-loophole warning-the black bar safety net

Italian security expert Vincenzo C. Aka found the Uber platform authentication vulnerabilities, any account can use this vulnerability to reset the password, this discovery yesterday officially announced. In fact, the initiator of the“authentication crisis”the vulnerability is in the seven months...

WordPress Fixes CSRF, XSS Bugs, Announces Bug Bounty Program

WordPress is urging webmasters to update to the latest version of its content management system to mitigate several issues, including a pair of cross-site scripting XSS bugs and a cross-site request forgery CSRF bug that’s existed for 10 months. The latest iteration of the software, version 4.7.5...

Nextcloud: Email Spoofing Vulnerability from nextcloud.

Hi nextcloud, Here is Shaifullah Shaon BlackEyE, An Ethical Hacker. a white hat cyber security researcher from Bangladesh reporting a serious 3'rd ranking in OWASP security vulnerability on your system. There is an Email Spoofing Vulnerability from nextcloud. Steps to reproduce: 1 Go to...

NextCloud / OwnCloud Cross Site Scripting

================================================================== Nextcloud/Owncloud - Reflected Cross Site Scripting in error pages ================================================================== Information ------------------------------------------------------------------ Name:...

HackerOne: HackerOne reports escalation to JIRA is CSRF vulnerable

Summary: HackerOne reports escalation to JIRA is CSRF vulnerable Description Include Impact: An attacker can steal private reports details through a CSRF in HackerOne report escalation to JIRA implementation. CSRF GET https://hackerone.com/reports/REPORTNUMBER/escalate Optional: Supporting...

HackerOne: Changing Victim's JIRA Integration Settings Through Multiple Bugs

Summary: Changing victim's JIRA integration settings through multiple bugs. Description: Using multiple HackerOne bugs, an attacker can change the victim's JIRA integration settings. Bugs: 1 The Jira integration consent screen lacks information about the Jira project that will be connected to...

HackerOne: www.hackerone.com website CSP "script-src" includes "unsafe-inline"

Summary: The HTTP header of the hackerone.com website includes an unsafe CSP parameter for "script-src". Description: The hackerone.com website https://www.hackerone.com has a Content-Security-Policy configured, as pointed out on the Bug Bounty page of their program: We utilize a strict Content...

HackerOne: Insecure SHA1withRSA in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.com

Hello, I just found some minor issue with RSA 2048 bits SHA1withRSA in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.com thru Qualys SSL Labs and wanted to report it. Proof of Concept https://www.ssllabs.com/ssltest/analyze.html?d=b5s.hackerone-ext-content.com Result: SHA1withRSA...

The Time Has Arrived to Embrace Hackers

BOSTON—More than ever, hackers are getting a welcoming embrace from law enforcement, governments and business. Bug bounties and vulnerability disclosure programs are becoming the norm across industry, and hackers are no longer universally viewed as a pariah. Simultaneously, however, groups such a...

Hack'em If You Can — U.S. Air Force launches Bug Bounty Program

With the growing number of data breaches and cyber attacks, a significant number of companies and organizations have started Bug Bounty programs for encouraging hackers and bug hunters to find and responsibly report vulnerabilities in their services and get rewarded. Now, following the success of...

Air Force Hopes To Attract Hackers With Bug Bounty Program

On Wednesday, the United States Air Force became the latest division of the U.S. Armed Forces to announce a public-facing bug bounty program. The program, Hack the Air Force, invites vetted white hat security experts to hack key public-facing Air Force websites. The Air Force follows in the...

Nextcloud: information disclose

Hello Team . I Reported a issue - disclosure SERVER Version !! when i interrupt this https://demo.nextcloud.com/ Request , its disclosure The server version Server: Apache/2.4.6 CentOS OpenSSL/1.0.1e-fips As you can See this Pic , or you can Interrupt the url useing Any Proxy tools like Burp Suit...

Weblate: Missing DMARC on weblate.org

Summary Email spoofing is possible due to missing SPF/Dmarc Records. Similar to this report submitted to Hackerone itself: https://hackerone.com/reports/575 Steps to reproduce: 1- Go to https://emkei.cz A Fake Mailer 2- Set the from to parameter as [email protected] or any other name, and send...

Mail.ru: Дубликат: https://hackerone.com/reports/219171 (доступ к аккаунту, через сброс пароля)

duplicate: https://hackerone.com/reports/219171...

WordPress: Reflected XSS at https://da.wordpress.org/themes/?s= via "s=" parameter

Hello - You have a reflected XSS vulnerability located at this domain: https://da.wordpress.org/themes/?s= This was tested on the latest version of Chrome Version 57.0.2987.133 64-bit By entering this payload in the URL, you are able to execute a script to fire:...

HackerOne: API Last Request Date/Time Not Updating

Hi All, I believe I've found a minor vulnerability with regards to your API last request date/time. However, I could not find any documentation on what this value is supposed to represent / when it should be relied on so I debated reporting this but figured it might in fact be an issue. Descripti...

Nintendo 3DS DNS Client Resolver Predictable TXID

Nintendo: 3DS DNS Client Resolver Library Uses Predictable TXID I bought a New Nintendo 3DS XL US with firmware 11.2.0-35U, and I've noticed that that DNS client resolved on the 3DS uses a simple incrementing TXID for lookups. This does not provide enough entropy to prevent remote attackers from...

Nintendo: 3DS DNS Client Resolver Library Uses Predictable TXID

I bought a New Nintendo 3DS XL US with firmware 11.2.0-35U, and I've noticed that that DNS client resolved on the 3DS uses a simple incrementing TXID for lookups. This does not provide enough entropy to prevent remote attackers from spoofing responses. For example, see MS08-020 when this happened...

HackerOne: Race condition leads to duplicate payouts

@jigarthakkar39 discovered a race condition issue with some recent changes to our payments code that caused him to be able to receive duplicate payouts for some bounties. A number of variables and timing had to be just right for it to actually allow a malicious actor to exploit this and receive...

HackerOne: Lack of input sanitization in Marketo form leads to execution of HTML in lead emails

Hi, There is SSRF vulnerability due to img tag injection in "Contact HackerOne Sales" form. Since vulnerability triggers after 18-20 minutes so I am not sure which site it affects. It might affect hackerone or marketo. So I thought it would be better to report it first on hackerone. POC 1. Naviga...