Lucene search
+L

2 matches found

Hacker One
Hacker One
added 2017/10/17 3:53 p.m.20 views

Inflection: Limited arbitrary text inclusion in user invite emails

When creating a GoodHire account, a fairly wide range of ASCII characters are permitted in certain fields like Company Name. This field is included in email templates that are automatically sent to new users when an account owner invites them to join a GoodHire account. Theoretically, spam conten...

6.8AI score
SaveExploits0
Hacker One
Hacker One
added 2017/07/13 2:36 p.m.28 views

GSA Bounty: Race condition on the Federalist API endpoints can lead to the Denial of Service attack

Description Hello. I discovered that the Federalist API doesn't have rate limiting in place, and executes any amount of request to the endpoint in parallel mode. The impact Since you are using the cloud, and i can't test the production environment, impact is theoretical in this case - it can be a...

0.4AI score
SaveExploits0
Rows per page
Query Builder