Bug Bounty Channel

🏦 HackerOne Report ⚠️ Title: \`exportReportPdf\` mutation shows internal Activity 🔍 Reporter: 0v3rw4tch (kimingi) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: High └ 🎯 CWE: Not Specified └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-07-29 15:01:10 UTC └ 📝 Created:…

🏦 AWS VDP Report ⚡ Title: Non-Production API Endpoints for the Amazon Cloudwatch Fails to Log to CloudTrail Resulting in Silent Permission Enumeration 🔍 Reporter: nick_frichette_dd (Nick Frichette \(Datadog\)) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE:…

🏦 Node.js Report ⚡ Title: HTTP Request Smuggling via Connection: close<TAB> in Node.js llhttp parser 🔍 Reporter: nadav0077 (Nadav Magier) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: HTTP Request Smuggling └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed:…

🏦 Liberapay Report ⚡ Title: Unauthenticated team "income/payments" export ignores donor privacy settings \(hide\_giving, hide\_from\_lists\) and uses frozen visibility, exposing donat 🔍 Reporter: its9me (Ali Khaled) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯…

🏦 8x8 Report ⚠️ Title: connect.8x8.com/api/v1: JWT Algorithm Confusion Vulnerability 🔍 Reporter: kyotozzx (Kauã Ferreira) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: High └ 🎯 CWE: Improper Verification of Cryptographic Signature └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed:…