User friendly unofficial HackerOne public disclosures, keeps you updated about the recently disclosed bugs.
Made With ♥ By Hackers For Hackers. - @rohsec
⚡ HTTP/3 paused transfer buffers incoming data without bound up to ~1 GiB
👨🏻💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 https://t.co/iaJ2TG736B
#bugbounty#bugbountytips#cybersecurity#infosec
⚡ rustls backend silently ignores CURLOPT_CRLFILE when native CA store is active
👨🏻💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 https://t.co/bjjDd9wWmw
#bugbounty#bugbountytips#cybersecurity#infosec
⚡ another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link
👨🏻💻 rox-11 ➟ Liberapay
⬜ None
💰 None
🔗 https://t.co/Xllx8Fmx59
#bugbounty#bugbountytips#cybersecurity#infosec
⚡ Liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link
👨🏻💻 rox-11 ➟ Liberapay
⬜ None
💰 None
🔗 https://t.co/kjQaIMx12J
#bugbounty#bugbountytips#cybersecurity#infosec
⚡ Private circle can be added to another circle via API despite visibility restriction
👨🏻💻 vidang04 ➟ Nextcloud
🟨 Low
💰 $150
🔗 https://t.co/PCfqwbjfjh
#bugbounty#bugbountytips#cybersecurity#infosec