Hackerone reports 2022.10

23000$ for Authentication Bypass & File Upload & Arbitrary File Overwrite

https://medium.com/@h4x0r_dz/23000-for-authentication-bypass-file-upload-arbitrary-file-overwrite-2578b730a5f8

Local file read at https://████/ [HtUS]

👉 https://hackerone.com/reports/1626210

🔹 Severity: Critical | 💰 1,000 USD

🔹 Reported To: U.S. Dept Of Defense

🔹 Reported By: #sudi

🔹 State: 🟢 Resolved

🔹 Disclosed: October 14, 2022, 1:51pm (UTC)

Unauthenticated SQL Injection at █████████  [HtUS]

👉 https://hackerone.com/reports/1626226

🔹 Severity: Critical | 💰 1,000 USD

🔹 Reported To: U.S. Dept Of Defense

🔹 Reported By: #0xd0ff9

🔹 State: 🟢 Resolved

🔹 Disclosed: October 14, 2022, 5:54pm (UTC)