Bugpoint – Telegram
Bugpoint
@bugpoint
1.06K subscribers
3.73K photos
3.73K links
Latest updates about disclosure bug bounty reports: tech details, impacts, bounties 📣

Rate👇
https://cutt.ly/bugpoint_rate
Feedback👇
https://cutt.ly/bugpoint_feedback

#️⃣ bug bounty disclosed reports
#️⃣ bug bounty write-ups
#️⃣ bug bounty teleg
Download Telegram
About
Blog
Apps
Platform
Join
Bugpoint
1.06K subscribers
Bugpoint
[CVE-2020-3452] Unauthenticated file read in Cisco ASA

👉 https://hackerone.com/reports/1415825

🔹 Severity: Critical
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #ghostxsec
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:13pm (UTC)
307 views
Bugpoint
RXSS ON https://██████████

👉 https://hackerone.com/reports/1244145

🔹 Severity: Medium
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #iam_a_jinchuriki
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:14pm (UTC)
278 views
Bugpoint
Unauthorized access to PII leads to MASS account Takeover

👉 https://hackerone.com/reports/1061736

🔹 Severity: Critical
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #takester
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:15pm (UTC)
245 views
Bugpoint
default ████ creds on https://████████

👉 https://hackerone.com/reports/711662

🔹 Severity: Critical
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #pirateducky
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:17pm (UTC)
228 views
Bugpoint
(CORS) Cross-origin resource sharing misconfiguration on https://█████████

👉 https://hackerone.com/reports/995144

🔹 Severity: Medium
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #fiveguyslover
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:18pm (UTC)
215 views
Bugpoint
Reflected XSS at https://██████/██████████ via "████████" parameter

👉 https://hackerone.com/reports/1457413

🔹 Severity: Medium
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #pelegn
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:19pm (UTC)
213 views
Bugpoint
Reflected XSS at https://██████/██████ via "██████" parameter

👉 https://hackerone.com/reports/1457444

🔹 Severity: Medium
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #pelegn
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:20pm (UTC)
209 views
Bugpoint
Reflected XSS at https://██████████/████████ via "███████" parameter

👉 https://hackerone.com/reports/1457493

🔹 Severity: Medium
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #pelegn
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:20pm (UTC)
203 views
Bugpoint
Reflected XSS at https://█████ via "██████████" parameter

👉 https://hackerone.com/reports/1457546

🔹 Severity: Medium
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #pelegn
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:21pm (UTC)
206 views
Bugpoint
Reflected XSS at https://█████████ via "███" parameter

👉 https://hackerone.com/reports/1457277

🔹 Severity: Medium
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #pelegn
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:22pm (UTC)
216 views
Bugpoint
XSS trigger via HTML Iframe injection in ( https://██████████ ) due to unfiltered HTML tags

👉 https://hackerone.com/reports/1200770

🔹 Severity: Medium
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #rozerx00
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:23pm (UTC)
215 views
Bugpoint
EC2 subdomain takeover at http://████████/

👉 https://hackerone.com/reports/1296366

🔹 Severity: Critical
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #dreyand72
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:24pm (UTC)
225 views
Bugpoint
CUI Labelled document out in the open

👉 https://hackerone.com/reports/1436460

🔹 Severity: Medium
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #pll25
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:26pm (UTC)
240 views
Bugpoint
IDOR

👉 https://hackerone.com/reports/389250

🔹 Severity: Medium
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #websecnl
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:27pm (UTC)
252 views
Bugpoint
Broken Authentication

👉 https://hackerone.com/reports/409237

🔹 Severity: High
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #websecnl
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:29pm (UTC)
280 views
Bugpoint
Arbitrary File Read at ███ via filename parameter

👉 https://hackerone.com/reports/1436223

🔹 Severity: Critical
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #shiar
🔹 State: 🟢 Resolved
🔹 Disclosed: February 14, 2022, 9:35pm (UTC)
301 views
Bugpoint
Ability to Disable the Login Attempt of any Shopify Owner for 24 hrs (Zero_Click)

👉 https://hackerone.com/reports/1406495

🔹 Severity: Low | 💰 900 USD
🔹 Reported To: Shopify
🔹 Reported By: #saurabhsankhwar3
🔹 State: 🟢 Resolved
🔹 Disclosed: February 15, 2022, 6:20am (UTC)
355 views
Bugpoint
When sharing a Deck card in conversation the metaData can be manipulated to open arbitrary URL

👉 https://hackerone.com/reports/1358977

🔹 Severity: Medium | 💰 100 USD
🔹 Reported To: Nextcloud
🔹 Reported By: #ctulhu
🔹 State: 🟢 Resolved
🔹 Disclosed: February 15, 2022, 7:09am (UTC)
385 views
Bugpoint
Cross-origin resource sharing

👉 https://hackerone.com/reports/1478449

🔹 Severity: No Rating | 💰 50 USD
🔹 Reported To: Showmax
🔹 Reported By: #qualin
🔹 State: 🟢 Resolved
🔹 Disclosed: February 15, 2022, 10:37am (UTC)
406 views
Bugpoint
XSS payload from an active vulnerability. What was bypassed with it? ⤵️

javanoscript:a=document;alert('\@example.com/|'+a.domain);
Anonymous Poll
21%
Text input URL validation
23%
WAF
56%
Text input URL validation + WAF
🔥5👍3
104 voters464 views
Bugpoint
Broken Authentication Session Token Bug

👉 https://hackerone.com/reports/948345

🔹 Severity: Medium
🔹 Reported To: Courier
🔹 Reported By: #the_hacker_girl
🔹 State: 🟢 Resolved
🔹 Disclosed: February 16, 2022, 11:43pm (UTC)
416 views