IDOR in Stats API Endpoint Allows Viewing Equity or Net Profit of Any MT Account

👉 https://hackerone.com/reports/1644436

🔹 Severity: No Rating | 💰 1,000 USD
🔹 Reported To: EXNESS
🔹 Reported By: #ashwarya
🔹 State: 🟢 Resolved
🔹 Disclosed: December 5, 2022, 3:50pm (UTC)

[Splatoon 3] Kick other players with NplnLogin message

🔹 Severity: Medium
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: Nintendo
🔹 Reported By: alzxk11
🔹 State: 🟢 Resolved
🔹 Disclosed: July 2, 2026, 1:25am (UTC)

A vulnerability was discovered that allowed players to kick other players from a Splatoon 3 game using an NplnLogin message.

👉 Read full report

admin.shopify.com: Shopify Flow continues sending internal emails to a configured recipient after the staff author is removed

🔹 Severity: None
🔹 Reported To: Shopify
🔹 Reported By: abahack
🔹 State: ⚪️ Informative
🔹 Disclosed: July 3, 2026, 6:50pm (UTC)

👉 Read full report

Any installed app can force immediate logout and persistent DOS of authenticated Basecamp sessions via unprotected exported StartActivity

🔹 Severity: Medium | 💰 287 USD
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: Basecamp
🔹 Reported By: zerodaysec_xyz
🔹 State: 🟢 Resolved
🔹 Disclosed: July 4, 2026, 11:05am (UTC)

A vulnerability was discovered in the Basecamp Android app that allowed any installed app to force immediate logout and persistent denial-of-service of authenticated Basecamp sessions. The vulnerability was due to the `com.basecamp.bc4.app.main.start.StartActivity` being declared as exported without any permission guard. This allowed any app to launch it with an explicit intent, terminating the current session and…

👉 Read full report

OS Command Injection in `aws-cdk-lib` NodejsFunction via Unsanitized `OsCommand` Helper (Supply Chain RCE)

🔹 Severity: High
🔹 Weakness: OS Command Injection
🔹 Reported To: AWS VDP
🔹 Reported By: kaporia
🔹 State: 🟢 Resolved
🔹 Disclosed: July 6, 2026, 5:48pm (UTC)

A vulnerability was discovered in the "aws-cdk-lib" NodejsFunction that allowed for OS command injection through the unsanitized "OsCommand" helper. The vulnerability was caused by the lack of proper escaping of user-controlled data when constructing shell commands during Docker-based bundling. This could have potentially led to arbitrary code execution within the Docker container, which had access to the host…

👉 Read full report

Kiro IDE Stores Auth Tokens with World-Readable Permissions (0644)

🔹 Severity: Medium
🔹 Weakness: Incorrect Default Permissions
🔹 Reported To: AWS VDP
🔹 Reported By: mistercloudsec
🔹 State: 🟢 Resolved
🔹 Disclosed: July 9, 2026, 3:31pm (UTC)

The Kiro IDE (version 0.11.107) wrote authentication tokens (access token and refresh token) to a file with world-readable permissions (0644). The file contained sensitive information, including the access token, refresh token, and profile ARN. This exposed the credentials to potential unauthorized access by local processes or users.

👉 Read full report

Unauthenticated Access to MMGIS Webhooks

🔹 Severity: High
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: oversudo
🔹 State: 🟢 Resolved
🔹 Disclosed: July 7, 2026
🐞 Source: Bugcrowd

👉 Read full report

Unauthenticated Disclosure of NASA Organizer Email Addresses via The Events Calendar REST API (CVE-2025-9808)

🔹 Severity: Informational
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: ARTanvir76
🔹 State: ⚪️ Informational
🔹 Disclosed: July 9, 2026
🐞 Source: Bugcrowd

👉 Read full report

[Atlas Browser] Fullscreen Toast Can Be Hidden by Repeated Constraint Validation Popups

🔹 Severity: Low
🔹 Reported To: OpenAI
🔹 Reported By: jodyritonga
🔹 State: 🟢 Resolved
🔹 Disclosed: July 9, 2026
🐞 Source: Bugcrowd

👉 Read full report

👋 Hey hunters!

The channel just leveled up — disclosed reports now pull from two sources: HackerOne & Bugcrowd 🐞🔥

More features are on the way 🚀 And you get a say — which platform should we plug in next? React to vote 👇

🔥 — Immunefi (web3)
👍 — huntr (open source)
🤔 — something else (tell us in comments)

Unauthenticated Error-Based SQL Injection in HEASARC W3Browse w3hdprods.pl

🔹 Severity: Critical
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: Anon0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: July 13, 2026
🐞 Source: Bugcrowd

👉 Read full report

SELECT ... INTO OUTFILE does not enforce the FILE WRITE privilege unprivileged arbitrary file write on the server

🔹 Severity: High
🔹 Weakness: Missing Authorization
🔹 Reported To: SingleStore
🔹 Reported By: bisht-ji
🔹 State: 🟢 Resolved
🔹 Disclosed: July 13, 2026, 7:35pm (UTC)
🐞 Source: HackerOne

A security vulnerability was reported in SingleStore's self-managed database server where the SELECT...INTO OUTFILE command did not properly enforce the FILE WRITE privilege. This allowed any authenticated user, including those with only USAGE privileges, to write arbitrary files to the aggregator host at any path, written as the engine OS user. The vulnerability affected default-configuration self-managed…

👉 Read full report

One-Click Data Exfiltration via rovoChatPrompt URL Parameter (Confluence / Rovo)

🔹 Severity: High
🔹 Reported To: Atlassian
🔹 Reported By: loacker
🔹 State: 🟢 Resolved
🔹 Disclosed: July 14, 2026
🐞 Source: Bugcrowd

👉 Read full report

Clickjacking Vulnerability – cdn.sit.earthdata.nasa.gov

🔹 Severity: Informational
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: SAIJAYANTH
🔹 State: ⚪️ Informational
🔹 Disclosed: July 14, 2026
🐞 Source: Bugcrowd

👉 Read full report

bedrock-mantle.api.aws accepts Bedrock API keys outside the IAM Deny, CloudTrail signal, and invocation logging AWS publishes for Bedrock keys

🔹 Severity: Medium
🔹 Weakness: Insecure Default Initialization of Resource
🔹 Reported To: AWS VDP
🔹 Reported By: mistercloudsec
🔹 State: 🟢 Resolved
🔹 Disclosed: July 14, 2026, 6:52pm (UTC)
🐞 Source: HackerOne

A second Bedrock API key-accepting service plane called "bedrock-mantle" was discovered. This plane was not described in AWS's customer-facing Bedrock documentation. As a result, the AWS-published security controls to detect and prevent Bedrock API key abuse failed to apply to the bedrock-mantle plane. Specifically, the IAM deny policy, CloudTrail detection signal, and model invocation logging configuration were…

👉 Read full report

Stored XSS on Trix Editor version latest (2.1.16) - Sanitizer Bypass

🔹 Severity: Low | 💰 337 USD
🔹 Weakness: Cross-site Scripting (XSS) - Stored
🔹 Reported To: Basecamp
🔹 Reported By: newbiefromcoma
🔹 State: 🟢 Resolved
🔹 Disclosed: July 14, 2026, 7:26pm (UTC)
🐞 Source: HackerOne

A vulnerability was discovered in Trix Editor version 2.1.16 that allowed for a Stored Cross-Site Scripting (XSS) attack. The vulnerability arose from an unsafe interaction between Trix's custom DOMPurify configuration and its document serialization logic. The issue was caused by Trix's use of the "data-trix-serialized-attributes" attribute, which was not properly sanitized during the serialization process…

👉 Read full report

Bedrock AgentCore Starter Toolkit Creates Gateway IAM Roles Without Confused Deputy Protections

🔹 Severity: Medium
🔹 Weakness: Incorrect Permission Assignment for Critical Resource
🔹 Reported To: AWS VDP
🔹 Reported By: mistercloudsec
🔹 State: 🟢 Resolved
🔹 Disclosed: July 15, 2026, 3:12pm (UTC)
🐞 Source: HackerOne

The Bedrock AgentCore Starter Toolkit was found to create IAM roles for the AgentCore Gateway with trust policies that lacked certain condition keys. This enabled a cross-account confused deputy attack where any AgentCore workload in any AWS account could assume the victim's Gateway role. The role granted access to sensitive resources in the account, including secrets, KMS, Lambda, DynamoDB, and S3.

👉 Read full report

Able to bypass authorization logic and gain more access then intended

🔹 Severity: Medium
🔹 Reported To: GitHub
🔹 Reported By: vaib25vicky
🔹 State: 🟢 Resolved
🔹 Disclosed: July 15, 2026, 4:35pm (UTC)
🐞 Source: HackerOne

A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application to gain unintended access to an organization's runner management. The vulnerability was fixed in versions 3.21.2, 3.20.4, 3.19.8, 3.18.11, 3.17.17, and 3.16.20. This vulnerability was reported via the GitHub Bug Bounty program.

👉 Read full report

Stored XSS in Rocket.Chat HTML File Export — Unauthenticated Entry via LiveChat

🔹 Severity: Medium
🔹 Weakness: Cross-site Scripting (XSS) - Stored
🔹 Reported To: Rocket.Chat
🔹 Reported By: olidayw
🔹 State: 🟢 Resolved
🔹 Disclosed: July 16, 2026, 5:02am (UTC)
🐞 Source: HackerOne

A vulnerability was discovered in the HTML file export feature of Rocket.Chat. The vulnerability allowed an attacker to inject arbitrary JavaScript code that would execute when the exported HTML file was opened. The root cause was that the application did not properly sanitize or escape user-supplied data before including it in the exported HTML. As a result, an unauthenticated attacker could leverage the…

👉 Read full report

💸 Top 10 biggest bounties ever paid on HackerOne

Publicly disclosed. Real payouts. One bug each 👇

🥇 $50,000 — Shopify
GitHub access token exposure · augustozanellato

🥈 $39,999 — Uber
API access · tomnomnom

🥉 $35,000 — GitLab
Account takeover via password reset · asterion04

4️⃣ $33,510 — GitLab
RCE via GitHub import · vakzz

5️⃣ $30,000 — PayPal
Dependency confusion RCE · alexbirsan

6️⃣ $29,000 — GitLab
Arbitrary file read · vakzz

7️⃣ $25,000 — Valve
SQL injection in report_xml.php · moskowsky

8️⃣ $25,000 — Snapchat
Exposed Kubernetes API → RCE · txt3rob

9️⃣ $25,000 — HackerOne
Disclosing a private program · haxta4ok00

🔟 $20,160 — X / xAI
Pre-auth RCE · orange

💡 And these are just the public ones — the biggest private bounties go way higher.

Which one surprises you most? 🤯