Bug Bounty Resources

Discover Blog Posts, Articles, Repositories, Videos, HackerOne Reports.

Resource Types

Tags

Request Access for Uber Device Returns Management Platform (https://www.eats-devicereturns.com/request-access/) Bypass Allows Access to PII

Reported on: 2020-10-17

State: Closed (resolved)

Severity Rating: high

Bounty Amount: $0

Researcher: hunt4p1zza

Website: https://www.uber.com

hunt4p1zza
Invite any user to your group without even following him

Reported on: 2015-03-20

State: Closed (resolved)

Severity Rating: N/A

Bounty Amount: $0

Researcher: indoappsec

Website: https://vimeo.com

indoappsec
Project Template functionality can be used to copy private project data, such as repository, confidential issues, snippets, and merge requests

Reported on: 2019-09-06

State: Closed (resolved)

Severity Rating: critical

Bounty Amount: $12000.0

Researcher: jobert

Website: https://about.gitlab.com

jobert
staff memeber can install apps even if have limitied access

Reported on: 2016-04-26

State: Closed (resolved)

Severity Rating: N/A

Bounty Amount: $0

Researcher: abdellahya

Website: https://www.shopify.com

abdellahya
Querying private posts and changing post meta

Reported on: 2016-08-07

State: Closed (resolved)

Severity Rating: N/A

Bounty Amount: $0

Researcher: sameoldstory

Website: https://www.secnews.gr

sameoldstory
From nobody to somebody

Reported on: 2019-01-24

State: Closed (resolved)

Severity Rating: medium

Bounty Amount: $0

Researcher: u3mur4

Website: https://keybase.io

u3mur4