PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

L'Oréal lauds live Bug Bounty success at LeHack 2024

yeswehack.com | blog | #bug-bounty | #ecommerce | #event | #live-hacking | #lehack | #loreal
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Recap of L'Oréal's 18-hour live Bug Bounty at LeHack: 71 vulnerabilities found across e-commerce, mobile and B2B assets, a mid-event scope extension, and DinDinDin topping the board.
Published
Collected

Related coverage

blog · yeswehack.com
Flashback to the L’Oréal Live Bug Bounty: Watch last year’s highlights as anticipation builds for leHACK 2025
Watch highlights from leHACK 2024, after which legendary cosmetics and personal care brand L’Oréal remediated dozens of serious vulnerabilities thanks to the efforts of some of Europe’s most accomplished security researchers.
blog · yeswehack.com
PUMA live hacking event revisited: leHACK’s biggest Bug Bounty yet
Recap of YesWeHack's live hacking event with PUMA at leHACK: 71 hunters filed 200+ reports, on-site collaboration validated complex business-logic flaws, and the winning pair worked entirely by hand.
blog · yeswehack.com
YesWeHack and Ferrero inaugurate Italy’s first live hacking event
YesWeHack and Ferrero staged Italy's first live hacking event at RomHack in Rome: 50+ ethical hackers competed and Ferrero's security team praised the collaboration.
blog · yeswehack.com
Hack Me I’m Famous #2: Louis Vuitton sets trend with first live hacking event in luxury fashion sector
Recap of 'Hack Me I'm Famous' #2 at Louis Vuitton's Paris HQ: around 40 handpicked hunters, a 30-hour live Bug Bounty on internally built digital assets and a new API scope.
blog · yeswehack.com
LeHACK recap: hunters push boundaries at YesWeHack Live Bug Bounty with Red Cross and Les Mousquetaires
Recap of YesWeHack's Live Bug Bounty at LeHACK with the French Red Cross and Les Mousquetaires: hunters reported 69 security bugs over the 21-hour event, led by ZaX.
blog · yeswehack.com
Walk me through Open My Heart – Live Bug Bounty event with Lazada
A walkthrough of 'Open My Heart', YesWeHack's first Singapore Live Bug Bounty with Lazada at HITBSecConf 2022, and how the e-commerce giant scaled its program from 20 hunters to 40,000+ researchers.
Back