Solution for XSS challenge calc.buggywebsite.com

👉 https://hackerone.com/reports/954249

🔹 Severity: High
🔹 Reported To: BugPoC
🔹 Reported By: #d1r3wolf
🔹 State: 🟢 Resolved
🔹 Disclosed: August 15, 2020, 6:32pm (UTC)

Unrestricted File Upload in Chat Window

👉 https://hackerone.com/reports/925513

🔹 Severity: Medium
🔹 Reported To: OWOX, Inc.
🔹 Reported By: #ant_pyne
🔹 State: 🟢 Resolved
🔹 Disclosed: August 16, 2020, 6:35am (UTC)

XSS in desktop client via invalid server address on login form

👉 https://hackerone.com/reports/685552

🔹 Severity: Medium | 💰 100 USD
🔹 Reported To: Nextcloud
🔹 Reported By: #jplopezy
🔹 State: 🟢 Resolved
🔹 Disclosed: August 17, 2020, 12:50am (UTC)

Authenticity token doesnt expire after single use leading to CSRF

👉 https://hackerone.com/reports/919112

🔹 Severity: No Rating
🔹 Reported To: Omise
🔹 Reported By: #justlife_4x4
🔹 State: ⚪️ Informative
🔹 Disclosed: August 17, 2020, 1:36am (UTC)

RTLO character allowed in shared files

👉 https://hackerone.com/reports/229170

🔹 Severity: Medium
🔹 Reported To: Nextcloud
🔹 Reported By: #inhibitor181
🔹 State: ⚪️ Informative
🔹 Disclosed: August 17, 2020, 8:34am (UTC)

Linux client is vulnerable to directory traversal when downloading files

👉 https://hackerone.com/reports/590319

🔹 Severity: Medium | 💰 250 USD
🔹 Reported To: Nextcloud
🔹 Reported By: #icewater
🔹 State: 🟢 Resolved
🔹 Disclosed: August 17, 2020, 12:57pm (UTC)

SSRF In plantuml (on plantuml.pre.gitlab.com)

👉 https://hackerone.com/reports/689245

🔹 Severity: Medium | 💰 100 USD
🔹 Reported To: GitLab
🔹 Reported By: #plazmaz
🔹 State: 🟢 Resolved
🔹 Disclosed: August 17, 2020, 1:55pm (UTC)

i don't the important and it's impact . the affected asset : https://github.com/solana-labs/solana/blob/master/.buildkite/env/secrets.ejson

👉 https://hackerone.com/reports/961167

🔹 Severity: High
🔹 Reported To: Solana BBP
🔹 Reported By: #hussein_mersal
🔹 State: 🟤 Duplicate
🔹 Disclosed: August 18, 2020, 2:44am (UTC)

i don't the important and it's impact . the affected asset: https://github.com/solana-labs/solana/blob/master/.buildkite/env/secrets.ejson

👉 https://hackerone.com/reports/961175

🔹 Severity: Medium
🔹 Reported To: Solana BBP
🔹 Reported By: #hussein_mersal
🔹 State: 🟤 Duplicate
🔹 Disclosed: August 18, 2020, 2:47am (UTC)

Sensitive data leaks [username, password, keys]

👉 https://hackerone.com/reports/961170

🔹 Severity: Critical
🔹 Reported To: Solana BBP
🔹 Reported By: #anjpan
🔹 State: ⚪️ Informative
🔹 Disclosed: August 18, 2020, 3:02am (UTC)

Session not invalidated after password reset

👉 https://hackerone.com/reports/917213

🔹 Severity: Medium
🔹 Reported To: Gener8
🔹 Reported By: #5hu8h4m_n4g4
🔹 State: 🟢 Resolved
🔹 Disclosed: August 18, 2020, 8:53am (UTC)

pre-auth Stored XSS in comments via javascript: url when administrator edits user supplied comment

👉 https://hackerone.com/reports/633231

🔹 Severity: High | 💰 650 USD
🔹 Reported To: WordPress
🔹 Reported By: #simonscannell
🔹 State: 🟢 Resolved
🔹 Disclosed: August 18, 2020, 6:01pm (UTC)

Stored XSS in Post Preview as Contributor

👉 https://hackerone.com/reports/497724

🔹 Severity: Medium | 💰 650 USD
🔹 Reported To: WordPress
🔹 Reported By: #simonscannell
🔹 State: 🟢 Resolved
🔹 Disclosed: August 18, 2020, 6:02pm (UTC)

Blind Stored XSS Via Staff Name

👉 https://hackerone.com/reports/948929

🔹 Severity: High | 💰 3,000 USD
🔹 Reported To: Shopify
🔹 Reported By: #rioncool22
🔹 State: 🟢 Resolved
🔹 Disclosed: August 18, 2020, 7:41pm (UTC)

access permission is not revoked even if the email has been deleted or changed on the partner account -partners.shopify-

👉 https://hackerone.com/reports/870001

🔹 Severity: Medium | 💰 1,000 USD
🔹 Reported To: Shopify
🔹 Reported By: #jaka_tingkir
🔹 State: 🟢 Resolved
🔹 Disclosed: August 18, 2020, 7:44pm (UTC)

OrderListInitial leaks order details

👉 https://hackerone.com/reports/882412

🔹 Severity: Medium | 💰 1,500 USD
🔹 Reported To: Shopify
🔹 Reported By: #sreeju_kc
🔹 State: 🟢 Resolved
🔹 Disclosed: August 18, 2020, 7:52pm (UTC)

Get analytics token using only apps permission

👉 https://hackerone.com/reports/901775

🔹 Severity: Medium | 💰 1,000 USD
🔹 Reported To: Shopify
🔹 Reported By: #jmp_35p
🔹 State: 🟢 Resolved
🔹 Disclosed: August 18, 2020, 9:29pm (UTC)

Some store settings/data are accessible to "No Access" permission users on GraphQL LiveView operation

👉 https://hackerone.com/reports/409973

🔹 Severity: No Rating | 💰 500 USD
🔹 Reported To: Shopify
🔹 Reported By: #tolo7010
🔹 State: 🟢 Resolved
🔹 Disclosed: August 18, 2020, 10:09pm (UTC)

Korea - Reflected XSS on https://www.istarbucks.co.kr/app/getGiftStock.do via "skuNo" and "skuImgUrl" parameters

👉 https://hackerone.com/reports/768345

🔹 Severity: Medium | 💰 250 USD
🔹 Reported To: Starbucks
🔹 Reported By: #rexvuz
🔹 State: 🟢 Resolved
🔹 Disclosed: August 18, 2020, 10:38pm (UTC)

Password reset link not expired at Stocky App

👉 https://hackerone.com/reports/898841

🔹 Severity: No Rating | 💰 500 USD
🔹 Reported To: Shopify
🔹 Reported By: #ayyoub
🔹 State: 🟢 Resolved
🔹 Disclosed: August 18, 2020, 10:53pm (UTC)

I.D.O.R TO EDIT ALL USER'S CREDIT CARD INFORMATION+(Partial credit card info disclosure)

👉 https://hackerone.com/reports/361984

🔹 Severity: Medium | 💰 500 USD
🔹 Reported To: Yelp
🔹 Reported By: #hk755a
🔹 State: 🟢 Resolved
🔹 Disclosed: August 19, 2020, 12:59am (UTC)