Spring Actuator endpoints publicly available, leading to account takeover

👉 https://hackerone.com/reports/862589

🔹 Severity: Critical | 💰 5,000 USD
🔹 Reported To: LINE
🔹 Reported By: #kazan71p
🔹 State: 🟢 Resolved
🔹 Disclosed: August 4, 2020, 2:52am (UTC)

Stored XSS in blob viewer

👉 https://hackerone.com/reports/806571

🔹 Severity: Medium | 💰 2,000 USD
🔹 Reported To: GitLab
🔹 Reported By: #yvvdwf
🔹 State: 🟢 Resolved
🔹 Disclosed: August 4, 2020, 9:46am (UTC)

Time-base SQL Injection in Search Users

👉 https://hackerone.com/reports/876800

🔹 Severity: Medium
🔹 Reported To: concrete5
🔹 Reported By: #thiennv
🔹 State: 🟢 Resolved
🔹 Disclosed: August 5, 2020, 1:08am (UTC)

XSS in image metadata field

👉 https://hackerone.com/reports/896511

🔹 Severity: Medium
🔹 Reported To: Nextcloud
🔹 Reported By: #yzy9951
🔹 State: 🟢 Resolved
🔹 Disclosed: August 5, 2020, 7:04am (UTC)

Arbitrary code execution in desktop client via OpenSSL config

👉 https://hackerone.com/reports/622170

🔹 Severity: Medium
🔹 Reported To: Nextcloud
🔹 Reported By: #l00ph0le
🔹 State: 🟢 Resolved
🔹 Disclosed: August 5, 2020, 8:50am (UTC)

S3 bucket data at http://rockset-support.s3-us-west-2.amazonaws.com/ reveals user addresses based on latitudes and longitudes.

👉 https://hackerone.com/reports/947725

🔹 Severity: High
🔹 Reported To: Rockset
🔹 Reported By: #thatquasar
🔹 State: 🟢 Resolved
🔹 Disclosed: August 5, 2020, 2:38pm (UTC)

Send Phishing/Spam email from support@sameroom.io to any email address.

👉 https://hackerone.com/reports/840688

🔹 Severity: High
🔹 Reported To: 8x8
🔹 Reported By: #wisp
🔹 State: 🟢 Resolved
🔹 Disclosed: August 5, 2020, 10:34pm (UTC)

Spring Actuator endpoints publicly available and broken authentication

👉 https://hackerone.com/reports/838635

🔹 Severity: Critical | 💰 12,500 USD
🔹 Reported To: LINE
🔹 Reported By: #kazan71p
🔹 State: 🟢 Resolved
🔹 Disclosed: August 6, 2020, 5:13am (UTC)

Memory Leak in OCUtil.dll library in Desktop client can lead to DoS

👉 https://hackerone.com/reports/588562

🔹 Severity: Medium
🔹 Reported To: Nextcloud
🔹 Reported By: #cwave
🔹 State: 🟢 Resolved
🔹 Disclosed: August 6, 2020, 1:56pm (UTC)

[wappalyzer] ReDoS allows an attacker to completely break Wappalyzer

👉 https://hackerone.com/reports/888030

🔹 Severity: High
🔹 Reported To: Node.js third-party modules
🔹 Reported By: #vrechson
🔹 State: 🟢 Resolved
🔹 Disclosed: August 6, 2020, 10:56pm (UTC)

Lack of Input sanitization leads to database Character encoding configuration Disclosure

👉 https://hackerone.com/reports/866271

🔹 Severity: Low | 💰 100 USD
🔹 Reported To: Unikrn
🔹 Reported By: #l_user
🔹 State: 🟢 Resolved
🔹 Disclosed: August 7, 2020, 8:48am (UTC)

Full Read SSRF on Gitlab's Internal Grafana

👉 https://hackerone.com/reports/878779

🔹 Severity: Critical | 💰 12,000 USD
🔹 Reported To: GitLab
🔹 Reported By: #rhynorater
🔹 State: 🟢 Resolved
🔹 Disclosed: August 7, 2020, 1:48pm (UTC)

Server-Side Request Forgery in "icons.bitwarden.net"

👉 https://hackerone.com/reports/913276

🔹 Severity: Medium
🔹 Reported To: Bitwarden
🔹 Reported By: #njgadhiya
🔹 State: 🟢 Resolved
🔹 Disclosed: August 7, 2020, 2:39pm (UTC)

Blind stored XSS due to insecure contact form at https://www.topcoder.com leads to leakage of session token and other PII

👉 https://hackerone.com/reports/878145

🔹 Severity: High
🔹 Reported To: Topcoder
🔹 Reported By: #mase289
🔹 State: 🟢 Resolved
🔹 Disclosed: August 7, 2020, 5:17pm (UTC)

Improper use of "path" parameter can be used to trick testers into leaking their Front-End PoC

👉 https://hackerone.com/reports/926221

🔹 Severity: Medium | 💰 1,000 USD
🔹 Reported To: BugPoC
🔹 Reported By: #acut3
🔹 State: 🟢 Resolved
🔹 Disclosed: August 7, 2020, 7:12pm (UTC)

Availing Zomato gold by using a random third-party `wallet_id`

👉 https://hackerone.com/reports/938021

🔹 Severity: Critical | 💰 2,000 USD
🔹 Reported To: Zomato
🔹 Reported By: #pandaaaa
🔹 State: 🟢 Resolved
🔹 Disclosed: August 7, 2020, 7:42pm (UTC)

Ability to manipulate price with a max threshold of `<1 Rupee` in support rider parameter

👉 https://hackerone.com/reports/927661

🔹 Severity: Low | 💰 150 USD
🔹 Reported To: Zomato
🔹 Reported By: #0xdexter
🔹 State: 🟢 Resolved
🔹 Disclosed: August 8, 2020, 7:36am (UTC)

Access control on https://eaccounting.stage.vismaonline.com/

👉 https://hackerone.com/reports/812143

🔹 Severity: Low | 💰 100 USD
🔹 Reported To: Visma Public
🔹 Reported By: #brdoors3
🔹 State: 🟢 Resolved
🔹 Disclosed: August 9, 2020, 7:57pm (UTC)

Solr Injection in `user_id` parameter at :/v2/leaderboard_v2.json

👉 https://hackerone.com/reports/952501

🔹 Severity: Critical | 💰 2,000 USD
🔹 Reported To: Zomato
🔹 Reported By: #zzzhacker13
🔹 State: 🟢 Resolved
🔹 Disclosed: August 10, 2020, 7:50am (UTC)

Unauthenticated users can access all food.grammarly.io user's data

👉 https://hackerone.com/reports/745495

🔹 Severity: Low | 💰 1,000 USD
🔹 Reported To: Grammarly
🔹 Reported By: #cript0nauta
🔹 State: 🟢 Resolved
🔹 Disclosed: August 10, 2020, 10:10am (UTC)

[www.zomato.com] Abusing LocalParams (city) to Inject SOLR query

👉 https://hackerone.com/reports/844428

🔹 Severity: Low | 💰 100 USD
🔹 Reported To: Zomato
🔹 Reported By: #zzzhacker13
🔹 State: 🟢 Resolved
🔹 Disclosed: August 10, 2020, 1:23pm (UTC)