⚡ Connection reuse ignores haproxyprotocol and HAPROXY_CLIENT_IP settings, allowing PROXY context t...
👨🏻💻 7omoo ➟ curl
⬜ None
💰 None
🔗 hackerone.com/reports/3741135
#bugbounty #bugbountytips #cybersecurity #infosec
English
H1 Disclosed - Public Disclosures
2.7K posts
H1 Disclosed - Public Disclosures
@h1Disclosed
User friendly unofficial HackerOne public disclosures, keeps you updated about the recently disclosed bugs. Made With ♥ By Hackers For Hackers. - @rohsec
127.0.0.1 Katılım Eylül 2022
2 Takip Edilen10.2K Takipçiler
⚡ Schannel custom-CA path skips Extended Key Usage enforcement
👨🏻💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 hackerone.com/reports/3734992
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ HTTP/3 paused transfer buffers incoming data without bound up to ~1 GiB
👨🏻💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 hackerone.com/reports/3734947
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ Cross-repository IDOR in `/settings/security_analysis/bypass_reviewers` allows unauthorized deleg...
👨🏻💻 @ahacker1_h1 ➟ GitHub
🟧 Medium
💰 None
🔗 hackerone.com/reports/3560256
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ HSTS multi-trailing-dot bypass-ish: possible incomplete fix for CVE-2022-30115
👨🏻💻 giant_anteater ➟ curl
🟧 Medium
💰 None
🔗 hackerone.com/reports/3733984
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ rustls backend silently ignores CURLOPT_CRLFILE when native CA store is active
👨🏻💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 hackerone.com/reports/3734935
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ libssh SFTP initialization ignores CURLOPT_TIMEOUT, hangs indefinitely
👨🏻💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 hackerone.com/reports/3735080
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ cookie: case-insensitive path comparison in replace_existing() allows cookie eviction across dist...
👨🏻💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 hackerone.com/reports/3735238
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ CURLOPT_HSTS_CTRL disables shared HSTS without share guard — use-after-free and double-free
👨🏻💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 hackerone.com/reports/3733934
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ Unauthenticated File Upload to CDN
👨🏻💻 @ph0r3nsic ➟ Enjin
🟧 Medium
💰 None
🔗 hackerone.com/reports/3589247
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ IDOR: autotranslate.translateMessage Full Message Content Leak
👨🏻💻 josan_george ➟ Rocket.Chat
🟧 Medium
💰 None
🔗 hackerone.com/reports/3713682
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ NULL pointer dereference in libcurl URL API redirect_url() with CURLU_DEFAULT_SCHEME
👨🏻💻 mulan_dh ➟ curl
⬜ None
💰 None
🔗 hackerone.com/reports/3736234
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ Trailing-dot IPv4 URL bypasses IP-address guard, allows wildcard DNS SAN match
👨🏻💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 hackerone.com/reports/3734921
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution
👨🏻💻 suul ➟ Nextcloud
🟥 High
💰 None
🔗 hackerone.com/reports/3462991
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ Origin IP Exposed waf bypass
👨🏻💻 @r00tSid ➟ Yuga Labs
🟨 Low
💰 $250
🔗 hackerone.com/reports/1821085
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ Kerberos/SPNEGO Connection Reuse Vulnerability
👨🏻💻 rootofpi_ramesh ➟ curl
⬜ None
💰 None
🔗 hackerone.com/reports/3725659
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ QuickSight Authorization Bypass: Chat Agents Accessible Despite Custom Permissions Denial
👨🏻💻 jcow ➟ AWS VDP
⬜ None
💰 None
🔗 hackerone.com/reports/3577145
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link
👨🏻💻 rox-11 ➟ Liberapay
⬜ None
💰 None
🔗 hackerone.com/reports/3723002
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ Liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link
👨🏻💻 rox-11 ➟ Liberapay
⬜ None
💰 None
🔗 hackerone.com/reports/3721519
#bugbounty #bugbountytips #cybersecurity #infosec
English
⚡ Private circle can be added to another circle via API despite visibility restriction
👨🏻💻 vidang04 ➟ Nextcloud
🟨 Low
💰 $150
🔗 hackerone.com/reports/3511998
#bugbounty #bugbountytips #cybersecurity #infosec
English