hackone 节点

当前节点:hackone

时间	节点
2021-03-06 10:01:07	hackone最新公开漏洞	Unauthorized access to █████████.com allows access to Uber Brazil tax documents and system. 影响厂商:Uber 奖励:4500.0USD 危险等级:low
2021-03-06 10:01:07	hackone最新公开漏洞	Sensitive information of helpdesk is being leaked. 影响厂商:Lark Technologies 奖励: 危险等级:medium
2021-03-06 10:01:07	hackone最新公开漏洞	Unauthorized access to .com allows access to Uber Brazil tax documents and system. 影响厂商:Uber(https://hackerone.com/uber)
2021-03-06 06:01:05	hackone最新公开漏洞	Java: Query for detecting JEXL injections 影响厂商:GitHub Security Lab(https://hackerone.com/github-security-lab)
2021-03-05 07:33:46	hackone最新公开漏洞	Java : Add query to detect Apache Struts enabled Development mode 影响厂商:GitHub Security Lab(https://hackerone.com/github-security-lab)
2021-03-05 07:33:46	hackone最新公开漏洞	Java : Add a query to detect Spring View Manipulation Vulnerability 影响厂商:GitHub Security Lab(https://hackerone.com/github-security-lab)
2021-03-05 07:33:46	hackone最新公开漏洞	ihsinme: CPP add query for CWE-788 Access of memory location after the end of a buffer using strncat. 影响厂商:GitHub Security Lab(https://hackerone.com/github-security-lab)
2021-03-05 07:33:46	hackone最新公开漏洞	[Java] CWE-489: Query to detect main() method in Java EE applications 影响厂商:GitHub Security Lab 奖励:1800.0USD 危险等级:medium
2021-03-04 19:33:45	hackone最新公开漏洞	Formula Injection vulnerability in CSV export feature 影响厂商:Nextcloud(https://hackerone.com/nextcloud)
2021-03-04 19:33:45	hackone最新公开漏洞	The password of a mail share is not set if the password is given when the share is created (Nextcloud < 18) 影响厂商:Nextcloud 奖励: 危险等级:low
2021-03-04 05:33:41	hackone最新公开漏洞	Lack of session expiration after password reset on TikTok Careers Portal 影响厂商:TikTok(https://hackerone.com/tiktok)
2021-03-04 05:33:41	hackone最新公开漏洞	User with single department permission can view applicant list of all department's 影响厂商:Lark Technologies(https://hackerone.com/lark_technologies)
2021-03-03 19:40:43	hackone最新公开漏洞	Information disclosure via a misconfigured third-party product 影响厂商:Algolia 奖励: 危险等级:high
2021-03-03 05:56:07	hackone最新公开漏洞	SDC bypass cloud.mail.ru for every /api/v3/* endpoint. 影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-03-03 03:56:07	hackone最新公开漏洞	Grinchs website takendown with various other exploits 影响厂商:h1-ctf(https://hackerone.com/h1-ctf)
2021-03-03 03:56:07	hackone最新公开漏洞	hackyholidays CTF Writeup 影响厂商:h1-ctf(https://hackerone.com/h1-ctf)
2021-03-03 01:56:07	hackone最新公开漏洞	Leaking Rockset API key on Github 影响厂商:Rockset 奖励: 危险等级:high
2021-03-02 23:56:08	hackone最新公开漏洞	Minor Account Privacy can Set to Everyone. 影响厂商:Rockstar Games 奖励: 危险等级:low
2021-03-02 21:56:12	hackone最新公开漏洞	Memory Dump and Env Disclosure via Spring Boot Actuator 影响厂商:Stripo Inc 奖励: 危险等级:medium
2021-03-02 06:55:32	hackone最新公开漏洞	Coupon codes indexed by Google 影响厂商:Dropbox 奖励:216.0USD 危险等级:low
2021-03-02 04:55:32	hackone最新公开漏洞	Config override using non-validated query parameter allows at least reflected XSS by injecting configuration into state 影响厂商:Grammarly 奖励:3000.0USD 危险等级:medium
2021-03-02 02:55:32	hackone最新公开漏洞	[xss] setTheme ajax_attach_action 影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-03-02 02:55:32	hackone最新公开漏洞	[xss] url 影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-03-02 02:55:32	hackone最新公开漏洞	[xss] passrestore m/touch/tel 影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-03-01 22:55:36	hackone最新公开漏洞	XXE webdav.mail.ru - PROPFIND/PROPPATCH 影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-03-01 22:55:36	hackone最新公开漏洞	Blind SSRF calendar.mail.ru 影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-03-01 20:55:32	hackone最新公开漏洞	Acting under any different user via DB-stored credentials 影响厂商:Nextcloud 奖励:250.0USD 危险等级:high
2021-03-01 20:55:32	hackone最新公开漏洞	Reflected XSS when renaming a file with a vulnerable name which results in an error 影响厂商:Nextcloud 奖励:100.0USD 危险等级:medium
2021-03-01 20:55:32	hackone最新公开漏洞	External storage app saves password for all users in the database 影响厂商:Nextcloud(https://hackerone.com/nextcloud)
2021-03-01 10:55:29	hackone最新公开漏洞	CORS Misconfiguration, could lead to disclosure of users information 影响厂商:Xiaomi(https://hackerone.com/xiaomi)
2021-03-01 10:55:29	hackone最新公开漏洞	DOM-based XSS in d.miwifi.com on IE 11 影响厂商:Xiaomi(https://hackerone.com/xiaomi)
2021-03-01 00:55:25	hackone最新公开漏洞	Reflected XSS https://tracker.my.com 影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-02-28 16:55:32	hackone最新公开漏洞	DNS Misconfiguration (Subdomain Takeover) █.staging.█.8x8.com 影响厂商:8x8 奖励: 危险等级:high
2021-02-28 12:55:23	hackone最新公开漏洞	DNS Misconfiguration (Subdomain Takeover) .staging..8x8.com 影响厂商:8x8(https://hackerone.com/8x8)
2021-02-27 10:55:21	hackone最新公开漏洞	Improper generating of access link at go.larksuite.com leads to access to other organizations/users' private data 影响厂商:Lark Technologies 奖励:600.0USD 危险等级:medium
2021-02-27 04:55:15	hackone最新公开漏洞	User has Sender permission can Get Team information 影响厂商:Dropbox 奖励: 危险等级:low
2021-02-27 04:55:15	hackone最新公开漏洞	User has Sender permission can Get Team information 影响厂商:Dropbox(https://hackerone.com/dropbox)
2021-02-26 18:55:15	hackone最新公开漏洞	capsula.mail.ru - reflected xss 影响厂商:Mail.ru(https://hackerone.com/mailru)
2021-02-26 10:55:12	hackone最新公开漏洞	Stealing app credentials by reflected xss on Lark Suite 影响厂商:Lark Technologies 奖励: 危险等级:medium
2021-02-26 08:55:12	hackone最新公开漏洞	Thumbor misconfiguration at blogapi.uber.com can lead to DoS 影响厂商:Uber(https://hackerone.com/uber)
2021-02-26 06:55:12	hackone最新公开漏洞	stack trace exposed on https://receipts.uber.com/ 影响厂商:Uber(https://hackerone.com/uber)
2021-02-26 06:55:12	hackone最新公开漏洞	[First 30] Stored XSS on login.uber.com/oauth/v2/authorize via redirect_uri parameter 影响厂商:Uber 奖励:3000.0USD 危险等级:high
2021-02-26 06:55:12	hackone最新公开漏洞	Stored XSS on auth.uber.com/oauth/v2/authorize via redirect_uri parameter leads to Account Takeover 影响厂商:Uber 奖励:3000.0USD 危险等级:medium
2021-02-26 06:55:12	hackone最新公开漏洞	Outdated Wordpress installation and plugins at www.uberxgermany.com create CSRF and XSS vulnerabilities 影响厂商:Uber 奖励:500.0USD 危险等级:medium
2021-02-26 06:55:12	hackone最新公开漏洞	[Pre-Submission][H1-4420-2019] API access to Phabricator on code.uberinternal.com from leaked certificate in git repo 影响厂商:Uber 奖励:39999.99USD 危险等级:critical
2021-02-26 06:55:12	hackone最新公开漏洞	Disclosure of Co-Rider user (Uber-pooling) profile picture at Amazon AWS Cloudfront within HTTP RESPONSE 影响厂商:Uber(https://hackerone.com/uber)
2021-02-26 06:55:12	hackone最新公开漏洞	Listing of email addresses of whitelisted business users visible at business.uber.com 影响厂商:Uber(https://hackerone.com/uber)
2021-02-26 06:55:12	hackone最新公开漏洞	Uber employees are sharing information on productforums.google.com 影响厂商:Uber(https://hackerone.com/uber)
2021-02-26 06:55:12	hackone最新公开漏洞	[usuppliers.uber.com] - Server Side Request Forgery via XXE OOB 影响厂商:Uber 奖励: 危险等级:high
2021-02-26 06:55:12	hackone最新公开漏洞	Arbitrary File Reading on Uber SSL VPN 影响厂商:Uber 奖励:6500.0USD 危险等级:high
2021-02-26 02:55:15	hackone最新公开漏洞	Race Condition allows to get more free trials and get more than 100 languages and strings for free 影响厂商:Weblate(https://hackerone.com/weblate)
2021-02-25 18:55:07	hackone最新公开漏洞	Cookie poisoning leads to DOS and Privacy Violation 影响厂商:CS Money 奖励:700.0USD 危险等级:high
2021-02-25 16:55:12	hackone最新公开漏洞	`account_info.read` scope OAuth app access token can change token owner's account name. 影响厂商:Dropbox 奖励:1728.0USD 危险等级:medium
2021-02-25 16:55:12	hackone最新公开漏洞	information disclosure lead to disclose users private notes 影响厂商:Automattic 奖励:150.0USD 危险等级:low
2021-02-25 10:55:24	hackone最新公开漏洞	Stored XSS via `Create a Fetish` section. 影响厂商:FetLife 奖励: 危险等级:medium
2021-02-25 09:33:04	hackone最新公开漏洞	SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs Cloudbot 影响厂商:Logitech 奖励:200.0USD 危险等级:medium