Hacker Activity Filter By Public hackerone.com https://hackerone.com/hacktivity https://hackerone.com/reports/2814774 Ruby on Rails: Possible DoS in NumberHelpers]]> https://hackerone.com/reports/4071872 curl: libcurl: Secure=1 cookie flag bypasses the 8.22.0 fix and leaks over HTTP]]> https://hackerone.com/reports/4064040 curl: Use-after-free read of the freed referer buffer in `curl_easy_setopt(CURLOPT_REFERER)` — stale heap bytes transmitted in an outbound `Referer:` heade]]> https://hackerone.com/reports/3802451 Essity: HTML Injection in Contact Form Email Enables Phishing via Legitimate ████████ Infrastructure]]> https://hackerone.com/reports/4085412 curl: Rustls backend discloses out-of-bounds heap data during legal IMAP upload cancellation]]> https://hackerone.com/reports/4059104 curl: IMAP literal size truncation on 32-bit platforms corrupts downloads and desynchronizes the response parser]]> https://hackerone.com/reports/3987499 Khan Academy: Client-Side Denial of Service (DoS) via Memory Exhaustion on Password Reset Endpoint]]> https://hackerone.com/reports/3766217 MariaDB: libmariadb ( mariadb-connector-c ): stack overflow via server-controlled field->length in prepared-statement codec]]> https://hackerone.com/reports/3678395 MariaDB: Path Traversal in mbstream Extract]]> https://hackerone.com/reports/3943339 Basecamp: One-click cross-account JavaScript execution steals a victim write token through Turbo pagination and unattached Active Storage HTML]]> https://hackerone.com/reports/3862641 [$15000] HackerOne: IDOR allows user to access report details via reference.json endpoint]]> https://hackerone.com/reports/3623149 Nextcloud: SSRF via User-Controlled Push proxyServer in Notifications Push Registration]]> https://hackerone.com/reports/3896671 MariaDB: Connector/C Out-of-bounds read in `unpack_fields()` from short metadata field]]> https://hackerone.com/reports/3872239 MariaDB: Connector/J: malicious server crashes client JVM via unbounded result-set field-count allocation in ClientMessage.readPacket]]> https://hackerone.com/reports/3893632 WordPress: Unauthenticated disclosure of draft/private/pending post titles & IDs via Secure Custom Fields nopriv AJAX field-query handlers (post_object/relations]]> https://hackerone.com/reports/4057637 curl: [HIGH] CWE-22 — Path Traversal in FTP Wildcard Download via Unencoded `.` in Escaped Filenames]]> https://hackerone.com/reports/4053066 curl: Missing applicability validation allows non-applicable HTTPS RR to reach ECH processing]]> https://hackerone.com/reports/4040799 curl: Windows filename sanitizer misses Unicode COM/LPT reserved device names]]> https://hackerone.com/reports/4000185 [$200] HackerOne: HackerOne Code sends live password-reset tokens to Segment in automatic page events]]> https://hackerone.com/reports/3625210 [$150] Nextcloud: PIN bypass in PassCodeActivity via back button]]> https://hackerone.com/reports/3617729 [$250] Nextcloud: Mail contact autocomplete bypasses administrator-configured user enumeration restrictions and expose member information outside the intended scope]]> https://hackerone.com/reports/3610332 [$150] Nextcloud: Approval app's file-freshness check can be bypassed by omitting the etag parameter, allowing approval of unreviewed file changes]]> https://hackerone.com/reports/3599470 Nextcloud: Improper input validation in emoji field leads to sidebar UI denial of service]]> https://hackerone.com/reports/3599383 [$200] Nextcloud: Arbitrary Board Preference Injection via Deck Config API]]> https://hackerone.com/reports/4025056 curl: HTTP/1.1 response framing violation and unsafe connection reuse when transfer decoding is disabled]]>