08-16-2025, 12:30 PM
High
resolved
resolved
Internal Access to Hackerone confluence Docs
Bug reported by was disclosed at August 15, 2025, 3:30 pm | Misconfiguration
The vulnerability allowed external access to HackerOne's internal Confluence documentation through a support system misconfiguration. This configuration issue granted the ability to view and modify limited content within the Confluence instance.
Low
resolved
resolved
Rails Debug Mode Enabled On ( https://44.208.145.207/testrail/files.md5 )
Bug reported by Hackwithskills was disclosed at August 15, 2025, 2:24 pm |
Summary:
A Ruby on Rails web application running in development mode was identified on a Malwarebytes server. This exposed sensitive system information, including details about middleware components and application root paths, which should not have been accessible in a production environment.