H1 Disclosed - Public Disclosures

User friendly unofficial HackerOne public disclosures, keeps you updated about the recently disclosed bugs.
Made With ♥ By Hackers For Hackers. - @rohsec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ Connection reuse ignores haproxyprotocol and HAPROXY_CLIENT_IP settings, allowing PROXY context t...
👨🏻‍💻 7omoo ➟ curl
⬜ None
💰 None
🔗 https://t.co/OpwX3sbdra
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ Schannel custom-CA path skips Extended Key Usage enforcement
👨🏻‍💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 https://t.co/gaaemyXcte
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ HTTP/3 paused transfer buffers incoming data without bound up to ~1 GiB
👨🏻‍💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 https://t.co/iaJ2TG736B
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ Cross-repository IDOR in `/settings/security_analysis/bypass_reviewers` allows unauthorized deleg...
👨🏻‍💻 @ahacker1_h1 ➟ GitHub
🟧 Medium
💰 None
🔗 https://t.co/XEw5SjzbzP
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ HSTS multi-trailing-dot bypass-ish: possible incomplete fix for CVE-2022-30115
👨🏻‍💻 giant_anteater ➟ curl
🟧 Medium
💰 None
🔗 https://t.co/K4FNv698pA
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ rustls backend silently ignores CURLOPT_CRLFILE when native CA store is active
👨🏻‍💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 https://t.co/bjjDd9wWmw
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ libssh SFTP initialization ignores CURLOPT_TIMEOUT, hangs indefinitely
👨🏻‍💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 https://t.co/fIXQJ8S6P6
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ cookie: case-insensitive path comparison in replace_existing() allows cookie eviction across dist...
👨🏻‍💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 https://t.co/bKVIiDqprv
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ CURLOPT_HSTS_CTRL disables shared HSTS without share guard — use-after-free and double-free
👨🏻‍💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 https://t.co/dMaeUOAeJ6
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ Unauthenticated File Upload to CDN
👨🏻‍💻 @ph0r3nsic ➟ Enjin
🟧 Medium
💰 None
🔗 https://t.co/vzq7Ppp5Ie
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ IDOR: autotranslate.translateMessage Full Message Content Leak
👨🏻‍💻 josan_george ➟ https://t.co/t9fV32BDu9
🟧 Medium
💰 None
🔗 https://t.co/5FqgHc4QL9
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ NULL pointer dereference in libcurl URL API redirect_url() with CURLU_DEFAULT_SCHEME
👨🏻‍💻 mulan_dh ➟ curl
⬜ None
💰 None
🔗 https://t.co/P6giG6HAw7
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ Trailing-dot IPv4 URL bypasses IP-address guard, allows wildcard DNS SAN match
👨🏻‍💻 giant_anteater ➟ curl
⬜ None
💰 None
🔗 https://t.co/RZSRf8xBLn
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution
👨🏻‍💻 suul ➟ Nextcloud
🟥 High
💰 None
🔗 https://t.co/pMDLrvLTPe
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ Origin IP Exposed waf bypass
👨🏻‍💻 @r00tSid ➟ Yuga Labs
🟨 Low
💰 $250
🔗 https://t.co/loKKHPvzhG
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ Kerberos/SPNEGO Connection Reuse Vulnerability
👨🏻‍💻 rootofpi_ramesh ➟ curl
⬜ None
💰 None
🔗 https://t.co/Oh0FIxkUet
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ QuickSight Authorization Bypass: Chat Agents Accessible Despite Custom Permissions Denial
👨🏻‍💻 jcow ➟ AWS VDP
⬜ None
💰 None
🔗 https://t.co/5JLGvfuibb
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link
👨🏻‍💻 rox-11 ➟ Liberapay
⬜ None
💰 None
🔗 https://t.co/Xllx8Fmx59
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ Liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link
👨🏻‍💻 rox-11 ➟ Liberapay
⬜ None
💰 None
🔗 https://t.co/kjQaIMx12J
#bugbounty #bugbountytips #cybersecurity #infosec

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ Private circle can be added to another circle via API despite visibility restriction
👨🏻‍💻 vidang04 ➟ Nextcloud
🟨 Low
💰 $150
🔗 https://t.co/PCfqwbjfjh
#bugbounty #bugbountytips #cybersecurity #infosec