+- Dark C0d3rs (https://darkcoders.wiki)
+-- Forum: Exploit Log (https://darkcoders.wiki/Forum-Exploit-Log)
+--- Forum: Research Papers/Vulnerability reports (https://darkcoders.wiki/Forum-Research-Papers-Vulnerability-reports)
+--- Thread: HackerOne Disclosed Reports - 2025-05-30 (/Thread-HackerOne-Disclosed-Reports-2025-05-30)
HackerOne disclosed reports - 2025-05-30 - hashXploiter - 05-31-2025
resolved
Public GitHub repositories for multiple HackerOne managed triage team profiles contain private HackerOne reports information
Bug reported by Max was disclosed at May 31, 2025, 10:11 am | Information Disclosure
Publicly available GitHub repositories for HackerOne-managed triage team profiles were found to contain private HackerOne vulnerability reports. Several repositories were identified that reproduced exploits for private bug bounty programs. The disclosed information included details such as access tokens, server URLs, and secret leaks for various organizations' tools and services.
resolved
Information Disclosure of metrics fax.wavecell.com/metrics
Bug reported by kaue navarro was disclosed at May 30, 2025, 6:53 am | Information Disclosure
The fax.wavecell.com/metrics endpoint was found to disclose sensitive information. The information disclosure vulnerability was discovered and reported on the HackerOne platform.
resolved
Facebook Username Takeover via Broken Link in Footer
Bug reported by Try_the_hack was disclosed at May 30, 2025, 5:22 am | Improper Access Control - Generic
The Facebook username "Opnglobal" was available for takeover due to a broken link in the footer of the target URL. The vulnerability allowed an attacker to create a fake Facebook page that could mislead users and negatively impact the organization's social media presence.