Hacking8 安全信息流
当前节点:hackone
时间节点
2021-04-13 23:09:56hackone最新公开漏洞
Flash Based Reflected XSS on www.grouplogic.com/jwplayer/player.swf
影响厂商:Acronis 奖励: 危险等级:low
2021-04-13 23:09:56hackone最新公开漏洞
Reflected XSS on www.grouplogic.com/video.asp
影响厂商:Acronis 奖励: 危险等级:low
2021-04-13 23:09:56hackone最新公开漏洞
Reflected XSS on http://www.grouplogic.com/files/glidownload/verify.asp
影响厂商:Acronis 奖励:200.0USD 危险等级:low
2021-04-13 05:09:34hackone最新公开漏洞
porcupiney.hairs : Java/Android - Insecure Loading of a Dex File
影响厂商:GitHub Security Lab(https://hackerone.com/github-security-lab)
2021-04-13 05:09:33hackone最新公开漏洞
[codeql-go]: Add CWE-79: HTML template escaping passthrough
影响厂商:GitHub Security Lab(https://hackerone.com/github-security-lab)
2021-04-13 05:09:33hackone最新公开漏洞
ihsinme: CPP Add query for CWE-570 detect and handle memory allocation errors.
影响厂商:GitHub Security Lab(https://hackerone.com/github-security-lab)
2021-04-13 05:09:33hackone最新公开漏洞
[Java] CWE-759: Query to detect password hash without a salt
影响厂商:GitHub Security Lab(https://hackerone.com/github-security-lab)
2021-04-12 23:09:35hackone最新公开漏洞
Stored XSS at Module Name
影响厂商:Stripo Inc 奖励: 危险等级:medium
2021-04-12 19:09:30hackone最新公开漏洞
Blind SSRF on [relap.io]
影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-04-12 17:09:30hackone最新公开漏洞
Cross-site Scripting (XSS) - Reflected
影响厂商:Zivver(https://hackerone.com/zivver)
2021-04-11 03:09:19hackone最新公开漏洞
Reflected/Stored XSS on duckduckgo.com
影响厂商:DuckDuckGo 奖励: 危险等级:high
2021-04-11 01:09:20hackone最新公开漏洞
read new emails from any inbox IOS APP in notification center
影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-04-11 01:09:20hackone最新公开漏洞
Local SQL Injection in Content Provider (ru.mail.data.contact.ContactsProvider) of Mail.ru for Android, version 12.2.0.29734
影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-04-10 21:09:18hackone最新公开漏洞
CRLF INJECTION
影响厂商:U.S. General Services Administration 奖励: 危险等级:low
2021-04-10 07:59:58hackone最新公开漏洞
Exposed█████████in apk file - devbuilds.uber.com
影响厂商:Uber 奖励: 危险等级:high
2021-04-10 05:59:52hackone最新公开漏洞
Exposedin apk file - devbuilds.uber.com
影响厂商:Uber(https://hackerone.com/uber)
2021-04-09 23:59:55hackone最新公开漏洞
XSS at https://www.glassdoor.com/Salary/* via filter.jobTitleExact
影响厂商:Glassdoor 奖励:900.0USD 危险等级:medium
2021-04-09 15:59:53hackone最新公开漏洞
Open Redirect и подмена ссылки в сниппете приложения VKMA
影响厂商:VK.com 奖励:300.0USD 危险等级:low
2021-04-09 15:59:52hackone最新公开漏洞
Отправляем смс на любой номер от имени vk.com. (Сообщение в смс всегда одно и то же, его менять нельзя.)
影响厂商:VK.com 奖励:100.0USD 危险等级:low
2021-04-09 15:59:51hackone最新公开漏洞
Open Redirect VKMA
影响厂商:VK.com(https://hackerone.com/vkcom)
2021-04-09 15:59:50hackone最新公开漏洞
vk.com. ( , .)
影响厂商:VK.com(https://hackerone.com/vkcom)
2021-04-09 11:59:48hackone最新公开漏洞
XSS at https://exchangemarketplace.com/blogsearch
影响厂商:Shopify 奖励:3500.0USD 危险等级:medium
2021-04-09 11:59:48hackone最新公开漏洞
XSS at https://exchangemarketplace.com/blogsearch
影响厂商:Shopify(https://hackerone.com/shopify)
2021-04-09 05:59:47hackone最新公开漏洞
RCE in ██████ subdomain via CVE-2017-1000486
影响厂商:U.S. Dept Of Defense 奖励: 危险等级:high
2021-04-09 05:59:45hackone最新公开漏洞
IDOR on https://██████ via POST UID enables database scraping
影响厂商:U.S. Dept Of Defense 奖励: 危险等级:medium
2021-04-09 05:59:44hackone最新公开漏洞
https://themes.shopify.com::: Host header web cache poisoning lead to DoS
影响厂商:Shopify 奖励:2900.0USD 危险等级:medium
2021-04-09 05:59:43hackone最新公开漏洞
[h1-2102] Partner's team member with no permission can retrieve services financial data
影响厂商:Shopify 奖励: 危险等级:medium
2021-04-09 03:59:46hackone最新公开漏洞
[h1-2102] [Yaworski's Broskis] Low privilege user can read POS PINs via graphql and elevate his privilege
影响厂商:Shopify 奖励:5300.0USD 危险等级:medium
2021-04-09 03:59:46hackone最新公开漏洞
Stored XSS on apps.shopify.com
影响厂商:Shopify(https://hackerone.com/shopify)
2021-04-09 03:59:45hackone最新公开漏洞
Sending trusted and emails through public API endpoint in site
影响厂商:U.S. Dept Of Defense(https://hackerone.com/deptofdefense)
2021-04-09 03:59:44hackone最新公开漏洞
RCE in subdomain via CVE-2017-1000486
影响厂商:U.S. Dept Of Defense(https://hackerone.com/deptofdefense)
2021-04-09 03:59:44hackone最新公开漏洞
IDOR on https:// via POST UID enables database scraping
影响厂商:U.S. Dept Of Defense(https://hackerone.com/deptofdefense)
2021-04-09 03:59:43hackone最新公开漏洞
The POS app doesn't revoke the Xauth token
影响厂商:Shopify(https://hackerone.com/shopify)
2021-04-09 03:59:42hackone最新公开漏洞
Staff with no permissions could possibly list and accept billing promotions
影响厂商:Shopify 奖励:600.0USD 危险等级:low
2021-04-08 13:59:38hackone最新公开漏洞
Integer overflow in CipherUpdate
影响厂商:OpenSSL (IBB) 奖励:2500.0USD 危险等级:high
2021-04-07 21:59:33hackone最新公开漏洞
Path traversal in Tempfile on windows OS due to unsanitized backslashes
影响厂商:Ruby 奖励:500.0USD 危险等级:medium
2021-04-06 23:59:36hackone最新公开漏洞
CRITICAL ISSUE : Leak of all accounts mail login md5 pass and more
影响厂商:Tube8 奖励: 危险等级:critical
2021-04-06 21:59:26hackone最新公开漏洞
XSS " " [city-mobil.ru/taxiserv]
影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-04-06 21:59:26hackone最新公开漏洞
DOM based XSS via postMessage at store.my.games
影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-04-06 21:59:26hackone最新公开漏洞
DOM XSS on https://biz.mail.ru/domains/goto/mail/ via parameter pollution
影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-04-06 21:59:25hackone最新公开漏洞
Exposed Credentials May Leads to Tarantool Infrastructure Leak
影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-04-06 21:59:25hackone最新公开漏洞
"blog.skillfactory.ru" Vulnerable to Directory Traversal
影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-04-06 21:59:25hackone最新公开漏洞
This Github Repository Seems Leaking Incoming Samokat Project
影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-04-06 21:59:25hackone最新公开漏洞
1C
影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-04-06 17:59:24hackone最新公开漏洞
Information Disclosure of Garbage Collection Cycle 'Again'
影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-04-06 05:59:17hackone最新公开漏洞
Ability to invite a new member on Sandbox Program
影响厂商:HackerOne 奖励: 危险等级:low
2021-04-05 13:59:15hackone最新公开漏洞
Login CSRF : Login Authentication Flaw on https://liberapay.com/
影响厂商:Liberapay 奖励: 危险等级:low
2021-04-05 13:59:14hackone最新公开漏洞
Login CSRF : Login Authentication Flaw on https://liberapay.com/
影响厂商:Liberapay(https://hackerone.com/liberapay)
2021-04-03 06:05:19hackone最新公开漏洞
Reflected XSS on ███
影响厂商:U.S. Dept Of Defense 奖励: 危险等级:medium
2021-04-03 06:05:18hackone最新公开漏洞
Cross-Tenant IDOR ( graphql `AddRulesToPixelEvents` query ) allowing to add, update, and delete rules of any Pixel events on the platform
影响厂商:TikTok 奖励: 危险等级:high
2021-04-03 04:05:27hackone最新公开漏洞
Improper Access Control - Generic on https://████
影响厂商:U.S. Dept Of Defense 奖励: 危险等级:high
2021-04-03 04:05:26hackone最新公开漏洞
Website vulnerable to POODLE (SSLv3) with expired certificate
影响厂商:U.S. Dept Of Defense(https://hackerone.com/deptofdefense)
2021-04-03 04:05:26hackone最新公开漏洞
Password Reset link hijacking via Host Header Poisoning leads to account takeover
影响厂商:U.S. Dept Of Defense(https://hackerone.com/deptofdefense)
2021-04-03 04:05:25hackone最新公开漏洞
Reflected XSS on
影响厂商:U.S. Dept Of Defense(https://hackerone.com/deptofdefense)
2021-04-03 04:05:24hackone最新公开漏洞
Reflected XSS on
影响厂商:U.S. Dept Of Defense(https://hackerone.com/deptofdefense)
2021-04-03 04:05:23hackone最新公开漏洞
Reflected XSS in https:// via "" parameter
影响厂商:U.S. Dept Of Defense(https://hackerone.com/deptofdefense)