bugpoint
Latest updates about disclosure bug bounty reports: tech details, impacts, bounties📣Rate👇https://cutt.ly/bugpoint_rateFeedback👇https://cutt.ly/bugpoint_feedback#️⃣bug bounty disclosed reports#️⃣bug bounty write-ups#️⃣bug bounty teleg
What our data says
- Created between November 2017 and June 2021.
- Posted within a week of our check, as did only 7% of English-language security channels of its size.
- Among English-language channels above 1,000 subscribers, 71% were created after it.
This channel is part of the discussion
bugpoint appears in 24 event pages on TGScopePre-authentication Stored XSS in Essity Customer-Service Pipeline via ContactApi (reCAPTCHA bypass + no rate limit) 🔹 Severity: Critical 🔹 Weakness: Cross-site Scripting (XSS) - Stored 🔹 Reported To: Essity 🔹 Reported By: matty69v 🔹 State: 🟢 Resolved 🔹 Disclosed: August…
HTTP Request Smuggling via Silent Header Truncation in Node.js HTTP Parser 🔹 Severity: Low 🔹 Weakness: HTTP Request Smuggling 🔹 Reported To: Node.js 🔹 Reported By: yushengchen 🔹 State: 🟢 Resolved 🔹 Disclosed: August 28, 2026, 2:16pm (UTC) 🐞 Source: HackerOne A flaw in…
Shared smart albums in the Photos app can expose files outside the album owner's configured source folders 🔹 Severity: Medium 🔹 Weakness: Improper Access Control - Generic 🔹 Reported To: Nextcloud 🔹 Reported By: suul 🔹 State: 🟢 Resolved 🔹 Disclosed: September 17, 2026,…
Author → stored XSS in wp-admin: unescaped sub-size filename from attachment metadata breaks out of the `src` attribute in `get_media_item()` 🔹 Severity: Critical 🔹 Weakness: Cross-site Scripting (XSS) - Stored 🔹 Reported To: WordPress 🔹 Reported By: jakubk 🔹 State: 🟢…
Unauthorized vertical privilege escalation vulnerability found on ibm.com endpoint 🔹 Severity: No Rating 🔹 Weakness: Improper Access Control - Generic 🔹 Reported To: IBM 🔹 Reported By: inventor0x01 🔹 State: 🟢 Resolved 🔹 Disclosed: August 28, 2026, 6:20pm (UTC) 🐞 Source:…
Improper input validation in emoji field leads to sidebar UI denial of service 🔹 Severity: Low 🔹 Weakness: Business Logic Errors 🔹 Reported To: Nextcloud 🔹 Reported By: yoyomiski 🔹 State: 🟢 Resolved 🔹 Disclosed: September 20, 2026, 10:04am (UTC) 🐞 Source: HackerOne A…