+- Dark C0d3rs (https://darkcoders.wiki)
+-- Forum: Exploit Log (https://darkcoders.wiki/Forum-Exploit-Log)
+--- Forum: Research Papers/Vulnerability reports (https://darkcoders.wiki/Forum-Research-Papers-Vulnerability-reports)
+--- Thread: HackerOne Disclosed Reports - 2025-08-15 (/Thread-HackerOne-Disclosed-Reports-2025-08-15)
HackerOne disclosed reports - 2025-08-15 - hashXploiter - 08-16-2025
High
resolved
resolved
Internal Access to Hackerone confluence Docs
Bug reported by was disclosed at August 15, 2025, 3:30 pm | Misconfiguration
The vulnerability allowed external access to HackerOne's internal Confluence documentation through a support system misconfiguration. This configuration issue granted the ability to view and modify limited content within the Confluence instance.
Low
resolved
resolved
Rails Debug Mode Enabled On ( https://44.208.145.207/testrail/files.md5 )
Bug reported by Hackwithskills was disclosed at August 15, 2025, 2:24 pm |
Summary:
A Ruby on Rails web application running in development mode was identified on a Malwarebytes server. This exposed sensitive system information, including details about middleware components and application root paths, which should not have been accessible in a production environment.