PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Why We’re Letting 60,000 Bugcrowd Security Researchers Ethically Hack Us

bugcrowd.com | research | #bug-bounty | #cloud | #bugcrowd | #jira | #atlassian | #confluence
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Atlassian launches its first public bug bounty on Bugcrowd, adding JIRA and Confluence Cloud to existing Trello and StatusPage programs, with Bugcrowd triaging submissions across 14+ product lines.
Published
Collected

Related coverage

research · slcyber.io
Advisory: Server Side Request Forgery in Jira Server (CVE-2022-26135)
# Advisory: Server Side Request Forgery in Jira Server (CVE-2022-26135) Get research alerts Share on social ) June 26, 2022 2 min read ### Table of Contents TOC Element Summary Impact Affected...
research · slcyber.io
Abusing functionality to exploit a super SSRF in Jira Server (CVE-2022-26135)
# Abusing functionality to exploit a super SSRF in Jira Server (CVE-2022-26135) Get research alerts Share on social ) June 26, 2022 10 min read ### Table of Contents TOC Element Introduction The...
vulnerability · hackerone.com
Severe Confluence Vulnerability is an Active Threat (CVE-2022-26134)
An unauthenticated RCE zero-day in Atlassian Confluence (CVE-2022-26134) was exploited in the wild before disclosure, with attack IPs surging past 800 within days. Patching should be immediate.
vulnerability · hackerone.com
HackerOne and JIRA integration update: more improvements, fewer clicks
HackerOne's JIRA integration gets three updates: the connector is now live on the Atlassian Marketplace, JIRA issues can be created in one click from a report, and two-way syncing is customizable per workflow.
blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
vulnerability · blog.viettelcybersecurity.com
CVE-2022-0540 - Authentication bypass in Seraph
The author dissects CVE-2022-0540, the Jira auth bypass in Atlassian Seraph: role resolution derives from the request URI, and one semicolon defeats the mapping, exposing privileged actions.
Back