🎯 New Report #3292573: SQL Injection when using FilteredRelation
🔺Severity: Critical
👽 Reporter: eyalsec
⭐️ Reputation: 167
🛠 State: resolved
💼 Team: Django
💵 Bounty: null
🕐 Submitted: 2025-08-09
⏰ Disclosed: 2025-09-15 14:01:21
📝 Summary: A SQL injection vulnerability was discovered in the Django framework when using the FilteredRelation feature. The vulnerability was located in the tests/filtered relation/tests.py file. The vulnerability allowed an attacker to inject malicious SQL code through the user data parameter used in the FilteredRelation and select related functions.
📂 Report JSON File: 3292573
@hackeronereports

🎯 New Report #2886723: GraphQL Introspection Enabled on Shopify API Endpoint (Intended Behavior)
🔺Severity: None
👽 Reporter: ahmednasr1
⭐️ Reputation: 94
🛠 State: informative
💼 Team: Shopify
💵 Bounty: null
🕐 Submitted: 2024-12-07
⏰ Disclosed: 2025-09-17 14:59:23
📝 Summary: null
📂 Report JSON File: 2886723
@hackeronereports

🎯 New Report #1737358: URL Scheme Validation Bypass in Shopify Mobile App Allows Javascript Execution
🔺Severity: Low
👽 Reporter: fr4via
⭐️ Reputation: 10817
🛠 State: resolved
💼 Team: Shopify
💵 Bounty: null
🕐 Submitted: 2022-10-17
⏰ Disclosed: 2025-09-17 15:23:43
📝 Summary: A vulnerability in the Shopify mobile application allowed bypassing URL scheme validation in the NavigationActivity component. Attackers could craft malicious URLs using data: or javascript: schemes to execute JavaScript code within the app's webview context.
📂 Report JSON File: 1737358
@hackeronereports

🎯 New Report #3228011: Critical Information Disclosure via /talos/api/v1/files/upload
🔺Severity: Critical
👽 Reporter: sameer ali
⭐️ Reputation: 417
🛠 State: resolved
💼 Team: Bykea
💵 Bounty: null
🕐 Submitted: 2025-06-27
⏰ Disclosed: 2025-09-17 19:09:12
📝 Summary: A vulnerability was discovered in the file upload functionality, where uploaded files were first stored on the server before being sent to S3. Due to a configuration flaw, memory chunks from the server were included in some uploaded files. This issue was classified as critical and was addressed as a priority.
📂 Report JSON File: 3228011
@hackeronereports

🎯 New Report #3341476: int overflow in krb5 read data() leads to (possible) massive `recv()` write
🔺Severity: Low
👽 Reporter: smiliesandco
⭐️ Reputation: 100
🛠 State: informative
💼 Team: curl
💵 Bounty: null
🕐 Submitted: 2025-09-16
⏰ Disclosed: 2025-09-18 09:33:13
📝 Summary: null
📂 Report JSON File: 3341476
@hackeronereports

🎯 New Report #1597271: Stored XSS in Email Notifcation
🔺Severity: Medium
👽 Reporter: khaledx
⭐️ Reputation: 1558
🛠 State: resolved
💼 Team: Insightly
💵 Bounty: null
🕐 Submitted: 2022-06-10
⏰ Disclosed: 2025-09-19 06:37:55
📝 Summary: A stored XSS vulnerability was discovered in the email notification feature of the crm.na1.insightly.com platform. The vulnerability allowed an attacker to inject malicious code into the email subject, which was then executed when users viewed the notification. The vulnerability was caused by insufficient input sanitization.
📂 Report JSON File: 1597271
@hackeronereports

🎯 New Report #1668489: CSRF vulnerability allows disabling Gmail contacts link for user referrals
🔺Severity: Medium
👽 Reporter: khaledx
⭐️ Reputation: 1558
🛠 State: resolved
💼 Team: Insightly
💵 Bounty: null
🕐 Submitted: 2022-08-13
⏰ Disclosed: 2025-09-19 06:36:34
📝 Summary: The CSRF vulnerability allowed users to disable Gmail contacts link for user referrals. The vulnerable endpoint did not sufficiently verify that the requests were intentionally performed by the user, allowing an attacker to generate a PoC that could be used to disable the victim's linked account.
📂 Report JSON File: 1668489
@hackeronereports

🎯 New Report #1387366: elections.k8s.io uses weak session secret key, may place elections at risk
🔺Severity: High
👽 Reporter: ian
⭐️ Reputation: 6661
🛠 State: resolved
💼 Team: Kubernetes
💵 Bounty: 250
🕐 Submitted: 2021-11-01
⏰ Disclosed: 2025-09-19 20:54:04
📝 Summary: The elections.k8s.io application used a weak Flask SECRET KEY, the string "N/A", to sign authentication cookies. This allowed the complete compromise of the application, as the session could be manipulated.
📂 Report JSON File: 1387366
@hackeronereports

🎯 New Report #1392262: Stored XSS via LINK Name.
🔺Severity: High
👽 Reporter: xploiterr
⭐️ Reputation: 34724
🛠 State: resolved
💼 Team: Insightly
💵 Bounty: null
🕐 Submitted: 2021-11-05
⏰ Disclosed: 2025-09-23 12:17:34
📝 Summary: The LINK NAME was not properly escaped at the Templates page, leading to Stored XSS. The name was reflected in the <script> tag, and due to lack of sanitization, the user could break out of the tag and execute the XSS.
📂 Report JSON File: 1392262
@hackeronereports

🎯 New Report #3124517: Arbitrary Read of Another Users private repository without Authorization
🔺Severity: High
👽 Reporter: furbreeze
⭐️ Reputation: 164
🛠 State: resolved
💼 Team: GitHub
💵 Bounty: 10000
🕐 Submitted: 2025-05-03
⏰ Disclosed: 2025-09-23 22:18:14
📝 Summary: An improper access control vulnerability was identified in GitHub Enterprise Server that allowed users with access to any repository to retrieve limited code content from another repository by creating a diff between the repositories. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.18, and was fixed in versions 3.14.17, 3.15.12, 3.16.8 and 3.17.5.
📂 Report JSON File: 3124517
@hackeronereports

🎯 New Report #2919216: XSS1
🔺Severity: None
👽 Reporter: admin097
⭐️ Reputation: 525
🛠 State: resolved
💼 Team: Informatica
💵 Bounty: null
🕐 Submitted: 2025-01-01
⏰ Disclosed: 2025-09-24 16:49:59
📝 Summary: The XSS vulnerability was discovered in the search functionality of the Informatica website. The vulnerability allowed an attacker to inject arbitrary JavaScript code into the search results, which could be executed by the user's browser.
📂 Report JSON File: 2919216
@hackeronereports

🎯 New Report #2311179: Information Exposure Through Directory Listing
🔺Severity: Medium
👽 Reporter: farhad0x1
⭐️ Reputation: 133
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2024-01-10
⏰ Disclosed: 2025-09-29 15:53:50
📝 Summary: The web server was configured to display a list of files contained in the directory. This is not recommended as the directory may have contained files that were not normally exposed through links on the website.
📂 Report JSON File: 2311179
@hackeronereports

🎯 New Report #2305880: Email not verified when changing afterwards on apps.nextcloud.com
🔺Severity: Low
👽 Reporter: farhad0x1
⭐️ Reputation: 133
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2024-01-06
⏰ Disclosed: 2025-09-29 15:50:37
📝 Summary: The email verification bypass vulnerability was discovered in the web application apps.nextcloud.com. The vulnerability allowed attackers to create accounts with any email address without verification, effectively taking over victim accounts.
📂 Report JSON File: 2305880
@hackeronereports

🎯 New Report #2778441: Exposing debug.log file leads to server full path disclosure
🔺Severity: Medium
👽 Reporter: farhad0x1
⭐️ Reputation: 133
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2024-10-12
⏰ Disclosed: 2025-09-29 15:50:22
📝 Summary: The debug.log file on the nextcloud.com website was publicly accessible and contained sensitive information, including the server's full directory path. This type of information disclosure could have assisted attackers in understanding the internal structure of the server.
📂 Report JSON File: 2778441
@hackeronereports

🎯 New Report #3211031: `use-mcp`'s oauth2 process uses a window.open call with untrusted mcp server provided data allowing for code execution under the page using it
🔺Severity: Medium
👽 Reporter: null smashmaster0045
⭐️ Reputation: 225
🛠 State: resolved
💼 Team: Cloudflare Public Bug Bounty
💵 Bounty: 550
🕐 Submitted: 2025-06-19
⏰ Disclosed: 2025-09-30 08:15:45
📝 Summary: The authorizeEndpoint parameter from use-mcp version was susceptible to XSS. Sanitization of that parameter was added in version 0.0.10 of use-mcp. A skilled attacker was able to turn this XSS into code execution on the client.
📂 Report JSON File: 3211031
@hackeronereports

🎯 New Report #1920908: Access to the personal emails of Rockstar Support agents through the support platform
🔺Severity: Low
👽 Reporter: gavinmartinwv
⭐️ Reputation: 176
🛠 State: resolved
💼 Team: Rockstar Games
💵 Bounty: 550
🕐 Submitted: 2023-03-28
⏰ Disclosed: 2025-10-02 18:08:44
📝 Summary: The researcher identified a flaw in the Zendesk configuration on the Rockstar Games support platform that could allow users to access the business emails of support agents as well as other non-customer facing information. The issue was resolved earlier this year when the support site was overhauled.
📂 Report JSON File: 1920908
@hackeronereports

🎯 New Report #3226838: Exceeding the limit of Workspaces via Race Condition
🔺Severity: Medium
👽 Reporter: 4x4
⭐️ Reputation: 446
🛠 State: resolved
💼 Team: SingleStore
💵 Bounty: null
🕐 Submitted: 2025-06-27
⏰ Disclosed: 2025-10-06 09:17:21
📝 Summary: The reporter discovered a race condition vulnerability in backend.singlestore.com that allowed free-tier users to bypass the 5-workspace limit by sending multiple simultaneous CreateWorkspace requests. This issue was patched by SingleStore as of October 3rd, 2025.
📂 Report JSON File: 3226838
@hackeronereports

🎯 New Report #3303136: Pending invites remain valid even after the inviter is removed.
🔺Severity: High
👽 Reporter: mantu1738
⭐️ Reputation: 116
🛠 State: resolved
💼 Team: Omise
💵 Bounty: null
🕐 Submitted: 2025-08-18
⏰ Disclosed: 2025-10-08 03:51:16
📝 Summary: The pending invites created by a removed admin remained valid, and members already added by the removed admin remained in the team with admin privileges, even after the inviter was removed.
📂 Report JSON File: 3303136
@hackeronereports

🎯 New Report #3176157: DNS Rebinding SSRF in Burp Suite MCP Server Enables Internal Network Access via send http1 request Tool
🔺Severity: None
👽 Reporter: farmer
⭐️ Reputation: 114
🛠 State: resolved
💼 Team: PortSwigger Web Security
💵 Bounty: 2000
🕐 Submitted: 2025-06-03
⏰ Disclosed: 2025-10-08 14:26:27
📝 Summary: The Burp Suite MCP (Model Context Protocol) server was vulnerable to a DNS rebinding attack. This allowed malicious websites to connect to the victim's local MCP server, use the send http1 request tool to make arbitrary HTTP requests, and access internal networks, localhost services, and cloud metadata endpoints. The vulnerability was caused by the lack of proper origin validation and CORS protection in the MCP server.
📂 Report JSON File: 3176157
@hackeronereports

🎯 New Report #3367292: CSRF allowing unauthorized modification of user Notes on ███████
🔺Severity: Low
👽 Reporter: kanon4
⭐️ Reputation: 742
🛠 State: resolved
💼 Team: Tucows (VDP)
💵 Bounty: null
🕐 Submitted: 2025-10-02
⏰ Disclosed: 2025-10-10 18:37:09
📝 Summary: A CSRF vulnerability was discovered that allowed unauthorized modification of user notes. The vulnerability was present in the endpoint that handled saving the notes. The endpoint did not implement proper CSRF protection, allowing an attacker to craft a malicious link that could be used to modify or delete the victim's notes. The complexity of the attack was that the attacker needed to be a member of the same organization as the victim in order to obtain the victim's correct ID, which was required to carry out the attack.
📂 Report JSON File: 3367292
@hackeronereports

🎯 New Report #3255910: Vulnerability: XML-RPC Interface Enabled and Accessible
🔺Severity: null
👽 Reporter: emad2466
⭐️ Reputation: 100
🛠 State: informative
💼 Team: Tucows (VDP)
💵 Bounty: null
🕐 Submitted: 2025-07-16
⏰ Disclosed: 2025-10-10 18:24:26
📝 Summary: null
📂 Report JSON File: 3255910
@hackeronereports