Bedrock AgentCore Starter Toolkit Creates Gateway IAM Roles Without Confused Deputy Protections

🔹 Severity: Medium
🔹 Weakness: Incorrect Permission Assignment for Critical Resource
🔹 Reported To: AWS VDP
🔹 Reported By: mistercloudsec
🔹 State: 🟢 Resolved
🔹 Disclosed: July 15, 2026, 3:12pm (UTC)
🐞 Source: HackerOne

The Bedrock AgentCore Starter Toolkit was found to create IAM roles for the AgentCore Gateway with trust policies that lacked certain condition keys. This enabled a cross-account confused deputy attack where any AgentCore workload in any AWS account could assume the victim's Gateway role. The role granted access to sensitive resources in the account, including secrets, KMS, Lambda, DynamoDB, and S3.

👉 Read full report

Able to bypass authorization logic and gain more access then intended

🔹 Severity: Medium
🔹 Reported To: GitHub
🔹 Reported By: vaib25vicky
🔹 State: 🟢 Resolved
🔹 Disclosed: July 15, 2026, 4:35pm (UTC)
🐞 Source: HackerOne

A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application to gain unintended access to an organization's runner management. The vulnerability was fixed in versions 3.21.2, 3.20.4, 3.19.8, 3.18.11, 3.17.17, and 3.16.20. This vulnerability was reported via the GitHub Bug Bounty program.

👉 Read full report

Stored XSS in Rocket.Chat HTML File Export — Unauthenticated Entry via LiveChat

🔹 Severity: Medium
🔹 Weakness: Cross-site Scripting (XSS) - Stored
🔹 Reported To: Rocket.Chat
🔹 Reported By: olidayw
🔹 State: 🟢 Resolved
🔹 Disclosed: July 16, 2026, 5:02am (UTC)
🐞 Source: HackerOne

A vulnerability was discovered in the HTML file export feature of Rocket.Chat. The vulnerability allowed an attacker to inject arbitrary JavaScript code that would execute when the exported HTML file was opened. The root cause was that the application did not properly sanitize or escape user-supplied data before including it in the exported HTML. As a result, an unauthenticated attacker could leverage the…

👉 Read full report

💸 Top 10 biggest bounties ever paid on HackerOne

Publicly disclosed. Real payouts. One bug each 👇

🥇 $50,000 — Shopify
GitHub access token exposure · augustozanellato

🥈 $39,999 — Uber
API access · tomnomnom

🥉 $35,000 — GitLab
Account takeover via password reset · asterion04

4️⃣ $33,510 — GitLab
RCE via GitHub import · vakzz

5️⃣ $30,000 — PayPal
Dependency confusion RCE · alexbirsan

6️⃣ $29,000 — GitLab
Arbitrary file read · vakzz

7️⃣ $25,000 — Valve
SQL injection in report_xml.php · moskowsky

8️⃣ $25,000 — Snapchat
Exposed Kubernetes API → RCE · txt3rob

9️⃣ $25,000 — HackerOne
Disclosing a private program · haxta4ok00

🔟 $20,160 — X / xAI
Pre-auth RCE · orange

💡 And these are just the public ones — the biggest private bounties go way higher.

Which one surprises you most? 🤯

Restricted RPC leaks alternative block hashes via /get_alt_blocks_hashes

🔹 Severity: Low
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: Monero
🔹 Reported By: int0ha_
🔹 State: 🟢 Resolved
🔹 Disclosed: July 20, 2026, 12:15am (UTC)
🐞 Source: HackerOne

The `/get_alt_blocks_hashes` RPC endpoint was restricted to prevent unintended access to alternative block hashes. The endpoint had previously been unrestricted.

👉 Read full report

Blind Enumeration of Private Card Names via Sort Oracle and ID Discovery

🔹 Severity: Low
🔹 Reported To: Trello
🔹 Reported By: BobAshEf
🔹 State: 🟢 Resolved
🔹 Disclosed: July 20, 2026
🐞 Source: Bugcrowd

👉 Read full report

Public Google Maps API key on www.globe.gov allows Geocoding API calls (billable use)

🔹 Severity: Informational
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: madhu873
🔹 State: ⚪️ Informational
🔹 Disclosed: July 21, 2026
🐞 Source: Bugcrowd

👉 Read full report

OAuth redirect uri validation bypass for :proxima_first_party_sync apps

🔹 Severity: High
🔹 Weakness: Open Redirect
🔹 Reported To: GitHub
🔹 Reported By: ahacker1
🔹 State: 🟢 Resolved
🔹 Disclosed: July 21, 2026, 9:43pm (UTC)
🐞 Source: HackerOne

A vulnerability was identified in GitHub Enterprise Server that allowed an attacker to bypass OAuth redirect URI validation. The vulnerability was fixed in versions 3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, 3.15.21, and 3.14.26. The vulnerability was reported through the GitHub Bug Bounty program.

👉 Read full report

connect.8x8.com/api/v1: JWT Algorithm Confusion Vulnerability

🔹 Severity: High | 💰 1,337 USD
🔹 Weakness: Improper Verification of Cryptographic Signature
🔹 Reported To: 8x8
🔹 Reported By: kyotozzx
🔹 State: 🟢 Resolved
🔹 Disclosed: July 22, 2026, 4:15am (UTC)
🐞 Source: HackerOne

A JWT algorithm confusion vulnerability was reported in the `v1` API of `connect.8x8.com`. The JWT verifier did not enforce algorithm pinning and would accept HS256 tokens signed with the RSA public key used as an HMAC secret. The issue was remediated by enforcing RS256 algorithm pinning in the `v1` API verifier.

👉 Read full report

GitHub user to server tokens can create issues in any public repository

🔹 Severity: Medium
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: GitHub
🔹 Reported By: ahacker1
🔹 State: 🟢 Resolved
🔹 Disclosed: July 22, 2026, 7:39pm (UTC)
🐞 Source: HackerOne

A vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App installation to perform certain write operations on public repositories outside the token's intended scope. The authorization check only verified that the installation had read permissions on the target repository rather than verifying that the token's installation was explicitly granted access to…

👉 Read full report

AWS *.a2z.com | Unauthenticated Clickhouse UI : Database access + SSRF

🔹 Severity: High
🔹 Weakness: Authentication Bypass
🔹 Reported To: AWS VDP
🔹 Reported By: notnotnotveg
🔹 State: 🟢 Resolved
🔹 Disclosed: July 22, 2026, 7:53pm (UTC)
🐞 Source: HackerOne

👉 Read full report

Identity Theft via Broken Link Hijacking on NASA Astronaut News Release Page

🔹 Severity: Low
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: muhammadabdillah64edc3
🔹 State: 🟢 Resolved
🔹 Disclosed: July 22, 2026
🐞 Source: Bugcrowd

👉 Read full report

Arbitrary External Redirect Through SAML RelayState After Successful Authentication

🔹 Severity: Low
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: 2yuk
🔹 State: 🟢 Resolved
🔹 Disclosed: July 22, 2026
🐞 Source: Bugcrowd

👉 Read full report

Blind SQL Injection in Search Functionality Leads to Full Database Extraction

🔹 Severity: Critical
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: molany
🔹 State: 🟢 Resolved
🔹 Disclosed: July 22, 2026
🐞 Source: Bugcrowd

👉 Read full report

Exposed Credentials in Public .env File on NASA Git Repository

🔹 Severity: Medium
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: Hunt3rboy
🔹 State: 🟢 Resolved
🔹 Disclosed: July 22, 2026
🐞 Source: Bugcrowd

👉 Read full report

Critical Authentication Bypass via Path Normalization (Double Slash) on Live NASA MODAPS OKAPI Production Instance

🔹 Severity: Critical
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: marcelojr
🔹 State: 🟢 Resolved
🔹 Disclosed: July 22, 2026
🐞 Source: Bugcrowd

👉 Read full report

RE : Host Header Injection leads to Cookie Domain Manipulation on sealevel.nasa.gov

🔹 Severity: Informational
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: sanjay910
🔹 State: ⚪️ Informational
🔹 Disclosed: July 23, 2026
🐞 Source: Bugcrowd

👉 Read full report

Reflected XSS and HTML Injection on cce-signin.gsfc.nasa.gov via 'popup_flag' parameter

🔹 Severity: Low
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: ItsS4LEH
🔹 State: 🟢 Resolved
🔹 Disclosed: July 23, 2026
🐞 Source: Bugcrowd

👉 Read full report

Data-Sculptor CSV expression evaluation leads to backend RCE, Kubernetes serviceaccount token disclosure, and authenticated Kubernetes control-plane access

🔹 Severity: High
🔹 Reported To: Atlassian
🔹 Reported By: MononcleMich
🔹 State: 🟢 Resolved
🔹 Disclosed: July 23, 2026
🐞 Source: Bugcrowd

👉 Read full report

ZMQ RPC Log Injection and Untrusted Payload Persistence

🔹 Severity: Medium
🔹 Weakness: CRLF Injection
🔹 Reported To: Monero
🔹 Reported By: redlobsterzzz
🔹 State: 🟢 Resolved
🔹 Disclosed: July 24, 2026, 7:19pm (UTC)
🐞 Source: HackerOne

A vulnerability was reported in the Monero CLI daemon where the ZMQ RPC request path logs untrusted request content before semantic validation. This allowed a remote party with access to the ZMQ endpoint to inject newline and control-character content into daemon logs, enabling log forging. The vulnerability was introduced in commit 77986023c3 and affected releases from v0.12.0.0 through v0.18.4.6, as well as the…

👉 Read full report