GitHub Security Lab - HackerOne Reports
View on HackerOne216
Total Reports
3
Critical
39
High
129
Medium
44
Low
[Python]: Timing attack
Reported by:
farid_hunter
|
Disclosed:
Medium
Bounty: $1800.00
[Java] CWE-918: Added URLClassLoader and WebClient SSRF sinks
Reported by:
p0wn4j
|
Disclosed:
Low
[Java]: CWE 295 - Insecure TrustManager - MiTM
Reported by:
intrigus
|
Disclosed:
Medium
Bounty: $1800.00
ihsinme: CPP Add query for CWE-675 Duplicate Operations on Resource
Reported by:
ihsinme
|
Disclosed:
Low
Bounty: $1000.00
[Java] JShell Injection
Reported by:
jessforfun
|
Disclosed:
Medium
[Java]: CWE-665 Insecure environment during RMI/JMX Server initialisation - All for one bounty
Reported by:
timolesml
|
Disclosed:
Medium
Bounty: $1800.00
[Java] CWE-601: Add Spring URL Redirect ResponseEntity sink
Reported by:
p0wn4j
|
Disclosed:
Medium
[Java] CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
Reported by:
jessforfun
|
Disclosed:
Medium
Java: Unsafe deserialization with Jackson
Reported by:
artem
|
Disclosed:
High
Bounty: $4500.00
[Python]: Add SqlAlchemy support for SQL injection query
Reported by:
thank_you
|
Disclosed:
High
[Python] CWE-287: LDAP Improper Authentication
Reported by:
jorgectf
|
Disclosed:
Medium
Bounty: $1800.00
[Java] CWE-552: Unsafe url forward
Reported by:
jessforfun
|
Disclosed:
Medium
[cpp] CWE-787: query to detect unsigned integer to signed integer conversions used in pointer arithmetics
Reported by:
jordyzomer
|
Disclosed:
High
Bounty: $4500.00
[Java]: CWE-200 - Query to detect insecure WebResourceResponse implementation
Reported by:
luchua
|
Disclosed:
Medium
Bounty: $1800.00
[Python] Unsafe unpacking using shutil.unpack_archive() query and tests
Reported by:
sim4n6
|
Disclosed:
Medium
CodeQL query for disabled revocation checking
Reported by:
artem
|
Disclosed:
Medium
Bounty: $1800.00
Java: CWE-273 Unsafe certificate trust
Reported by:
luchua
|
Disclosed:
Medium
Bounty: $1800.00
[Java] CWE-295 - Incorrect Hostname Verification - MitM
Reported by:
intrigus
|
Disclosed:
Medium
Bounty: $1800.00
CodeQL query to detect OGNL injections
Reported by:
grzegol
|
Disclosed:
High
Bounty: $2300.00
Go : Add more JWT sinks
Reported by:
porcupineyhairs
|
Disclosed:
Medium
Page 1 of 11
Next