3233 | My 2nd 4digit Bug Bounty From Facebook |
Logic flaw
Information disclosure |
Meta / Facebook |
Sudip Shah |
Bug Bounty | 2020-08-10 | 2023-06-13 |
3232 | CSP Bypass Vulnerability in Google Chrome Discovered - Almost Every Website In The World Was At Risk |
CSP bypass |
Google |
Gal Weizman (@WeizmanGal) |
Bug Bounty | 2020-08-10 | 2023-06-13 |
3230 | Group Admin Can’t Able to Moderate Comments When Posted Through Page : Facebook Bug Bounty 2020 |
Logic flaw |
Meta / Facebook |
Prakash Panta (@Prakashpanta268) |
Bug Bounty | 2020-08-11 | 2023-06-13 |
3229 | How I was able to find page/personal account disclosure on Instagram |
Information disclosure |
Meta / Facebook |
Ajay Gautam (@evilboyajay) |
Bug Bounty | 2020-08-11 | 2023-06-13 |
3227 | How I made $2000 with URL REDIRECTION? |
Open redirect
SQL injection |
NA |
Simran Singh |
Bug Bounty | 2020-08-12 | 2023-06-13 |
3226 | Cracking the 2FA |
MFA bypass |
NA |
Rushikesh Gaikwad (@rsg_1212) |
Bug Bounty | 2020-08-12 | 2023-06-13 |
3225 | Cache poisoning of wget |
Web cache poisoning |
NA |
Vuk Ivanovic |
Bug Bounty | 2020-08-12 | 2023-06-13 |
3224 | Blind OS Command Injection |
OS command injection |
NA |
Ashik B |
Bug Bounty | 2020-08-12 | 2023-06-13 |
3223 | Journey to my First Bug Hunt$$$$ |
CSRF |
NA |
Bala Praneeth (@Begin_hunt) |
Bug Bounty | 2020-08-13 | 2023-06-13 |
3222 | Leaking AWS Metadata - The Unusual Way |
Information disclosure
RCE |
NA |
Shubham Garg (@nullb0t) |
Bug Bounty | 2020-08-13 | 2023-06-13 |
3221 | False2True, Match and Replace bug hunting — A cautionary tale |
Privilege escalation |
NA |
Vuk Ivanovic |
Bug Bounty | 2020-08-14 | 2023-06-13 |
3220 | Improper Implementation of My Status video time limit in WhatsApp |
Logic flaw
Privacy issue
Android |
Meta / Facebook |
Vishal Ranjan |
Bug Bounty | 2020-08-14 | 2023-06-13 |
3219 | Deleted data stored permanently on Instagram? Facebook Bug Bounty 2020 |
Logic flaw
Privacy issue |
Meta / Facebook |
Saugat Pokharel (@saugatpk5) |
Bug Bounty | 2020-08-14 | 2023-06-13 |
3218 | Crowdsource Success Story: From an Out-of-Scope Open Redirect to CVE-2020-1323 |
Open redirect |
Microsoft |
Ozgur Alp (@ozgur_bbh) |
Bug Bounty | 2020-08-14 | 2023-06-13 |
3217 | Open Sesame: Escalating Open Redirect to RCE with Electron Code Review |
Open redirect
RCE
Security code review |
NA |
Eugene Lim (@spaceraccoonsec) |
Bug Bounty | 2020-08-14 | 2023-06-13 |
3216 | How recon helped me to find an interesting bug… |
Open redirect |
NA |
Vedant Tekale (@_justYnot) |
Bug Bounty | 2020-08-15 | 2023-06-13 |
3215 | How I was able to send Authentic Emails as others — Google VRP [Resolved] |
Logic flaw
HTML injection
Email spoofing
Open mail relay |
Google |
Sriram Kesavan (@sriramoffcl) |
Bug Bounty | 2020-08-15 | 2023-06-13 |
3214 | Disclosing wifi password via content provider injection in Xiaomi |
Content provider injection
Vulnerable Android content provider
Android |
Xiaomi |
Vishwaraj Bhattrai (@vishwaraj101) |
Bug Bounty | 2020-08-16 | 2023-06-13 |
3213 | How I got 450$ just in one Google search (SQLi + RXSS)? |
XSS
SQL injection |
NA |
Zhenwar Hawlery |
Bug Bounty | 2020-08-16 | 2023-06-13 |
3212 | InfluxDB Access at redact.8x8.com |
Missing authentication |
8x8 |
Myo Min Thu (@myominthu1337) |
Bug Bounty | 2020-08-16 | 2023-06-13 |
3211 | Witnet Network Bug Bounty: DOS Bug from Harsh Jain |
DoS |
Witnet |
Harsh Jain |
Bug Bounty | 2020-08-17 | 2023-06-13 |
3210 | Stealing your data using XSS |
XSS |
NA |
Viren Pawar (@VirenPawar_) |
Bug Bounty | 2020-08-17 | 2023-06-13 |
3209 | Account Takeover Using Re-Register [ Bug Bounty ] |
Account takeover |
NA |
Myo Min Thu (@myominthu1337) |
Bug Bounty | 2020-08-17 | 2023-06-13 |
3208 | Firebase Cloud Messaging Service Takeover: A small research that led to 30k$+ in bounties |
Hardcoded API keys
Information disclosure |
Google |
Abss (@absshax) |
Bug Bounty | 2020-08-17 | 2023-06-13 |
3207 | Windows AppX Deployment Service Local Privilege Escalation (CVE-2020-1488 |
Local Privilege Escalation |
Microsoft |
ACTIVELabs |
Bug Bounty | 2020-08-18 | 2023-06-13 |