Name		Name	Last commit message	Last commit date
Latest commit History 4 Commits
#192321 Open FTP server on a DoD system.pdf		#192321 Open FTP server on a DoD system.pdf
#215859 [REMOTE] Full Account Takeover At https___██████████████_CAS_.pdf		#215859 [REMOTE] Full Account Takeover At https___██████████████_CAS_.pdf
#217344 Path traversal on ████████.pdf		#217344 Path traversal on ████████.pdf
#227880 XXE in DoD website that may lead to RCE.pdf		#227880 XXE in DoD website that may lead to RCE.pdf
#228383 IDOR on DoD Website exposes FTP users and passes linked to all accounts!.pdf		#228383 IDOR on DoD Website exposes FTP users and passes linked to all accounts!.pdf
#248116 Remote Code Execution (RCE) in a DoD website.pdf		#248116 Remote Code Execution (RCE) in a DoD website.pdf
#258410 Gateway information leakage.pdf		#258410 Gateway information leakage.pdf
#272506 SQL injections.pdf		#272506 SQL injections.pdf
#272979 2 vulnerabilities of arbitrary code in ████████ - CVE-2017-5929.pdf		#272979 2 vulnerabilities of arbitrary code in ████████ - CVE-2017-5929.pdf
#310031 SQL injection on █████ due to tech.cfm.pdf		#310031 SQL injection on █████ due to tech.cfm.pdf
#313037 Blind SQL injection on ████████.pdf		#313037 Blind SQL injection on ████████.pdf
#323992 Publicly accessible Order confirmations leaking User Emails on ███.pdf		#323992 Publicly accessible Order confirmations leaking User Emails on ███.pdf
#326040 SSRF on █████████ Allowing internal server data access.pdf		#326040 SSRF on █████████ Allowing internal server data access.pdf
#329376 Remote Code Execution (RCE) in a DoD website.pdf		#329376 Remote Code Execution (RCE) in a DoD website.pdf
#329399 Remote Code Execution (RCE) in a DoD website.pdf		#329399 Remote Code Execution (RCE) in a DoD website.pdf
#329400 Remote Code Execution (RCE) in a DoD website.pdf		#329400 Remote Code Execution (RCE) in a DoD website.pdf
#348047 Code reversion allowing SQLI again in ███████.pdf		#348047 Code reversion allowing SQLI again in ███████.pdf
#374007 PII leakage due to caching of Order_Contract ID's on █████████.pdf		#374007 PII leakage due to caching of Order_Contract ID's on █████████.pdf
#381758 sql injection on _messagecenter_messagingcenter at https___www.███████_.pdf		#381758 sql injection on _messagecenter_messagingcenter at https___www.███████_.pdf
#381771 ████████ SQL.pdf		#381771 ████████ SQL.pdf
#384397 SQL Injection vulnerability located at ████████.pdf		#384397 SQL Injection vulnerability located at ████████.pdf
#389116 ███ exposes sensitive shipment information to public web.pdf		#389116 ███ exposes sensitive shipment information to public web.pdf
#390879 SQL Injection on www.██████████ on countID parameter.pdf		#390879 SQL Injection on www.██████████ on countID parameter.pdf
#395246 ███████ Site Exposes █████████ forms.pdf		#395246 ███████ Site Exposes █████████ forms.pdf
#406387 SSRF on ████████.pdf		#406387 SSRF on ████████.pdf
#410099 Account takeover due to CSRF in _Account details_ option on █████████.pdf		#410099 Account takeover due to CSRF in _Account details_ option on █████████.pdf
#419017 SQL Injection in ████.pdf		#419017 SQL Injection in ████.pdf
#428757 Admin panel take over _ User info leakage _ Mass Comprimise.pdf		#428757 Admin panel take over _ User info leakage _ Mass Comprimise.pdf
#429000 Access to all █████████ files, including CAC authentication bypass.pdf		#429000 Access to all █████████ files, including CAC authentication bypass.pdf
#470298 [██████] Cross-origin resource sharing misconfiguration (CORS).pdf		#470298 [██████] Cross-origin resource sharing misconfiguration (CORS).pdf
#482634 https___████████ Impacted by DNN ImageHandler SSRF.pdf		#482634 https___████████ Impacted by DNN ImageHandler SSRF.pdf
#484377 Information Disclosure (can access all ███s) within ███████ view █████████ Portal.pdf		#484377 Information Disclosure (can access all ███s) within ███████ view █████████ Portal.pdf
#488795 SQL injection on the https___████_.pdf		#488795 SQL injection on the https___████_.pdf
#489483 SQL Injection in the get_publications.php on the https___█████.pdf		#489483 SQL Injection in the get_publications.php on the https___█████.pdf
#491668 RCE on https___█████_ Using CVE-2017-9248.pdf		#491668 RCE on https___█████_ Using CVE-2017-9248.pdf
#497771 [Critical] Full local fylesystem access (LFI_LFD) as admin via Path Traversal in the misconfigured Java servlet on the https___███_.pdf		#497771 [Critical] Full local fylesystem access (LFI_LFD) as admin via Path Traversal in the misconfigured Java servlet on the https___███_.pdf
#519418 Trace.axd page leaks sensitive information.pdf		#519418 Trace.axd page leaks sensitive information.pdf
#519631 SQL Injection in ████.pdf		#519631 SQL Injection in ████.pdf
#526880 Request smuggling on ████████.pdf		#526880 Request smuggling on ████████.pdf
#538771 LFI with potential to RCE on ██████ using CVE-2019-3396.pdf		#538771 LFI with potential to RCE on ██████ using CVE-2019-3396.pdf
#544334 [Critical] Possibility to takeover any user account #2 without interaction on the https___██████████.pdf		#544334 [Critical] Possibility to takeover any user account #2 without interaction on the https___██████████.pdf
#576887 RCE on █████ via CVE-2017-10271.pdf		#576887 RCE on █████ via CVE-2017-10271.pdf
#577612 MSSQL injection via param Customwho in https___█████_News_Transcripts_Search_Sort_ and WAF bypass.pdf		#577612 MSSQL injection via param Customwho in https___█████_News_Transcripts_Search_Sort_ and WAF bypass.pdf
#587214 ██████ Authenticated User Data Disclosure.pdf		#587214 ██████ Authenticated User Data Disclosure.pdf
#622864 https___█████████ Vulnerable to CVE-2018-0296 Cisco ASA Path Traversal Authentication Bypass.pdf		#622864 https___█████████ Vulnerable to CVE-2018-0296 Cisco ASA Path Traversal Authentication Bypass.pdf
#632721 Root Remote Code Execution on https___███.pdf		#632721 Root Remote Code Execution on https___███.pdf
#644358 PII leakage-Full SSN on ███.pdf		#644358 PII leakage-Full SSN on ███.pdf
#665144 Partial SSN exposed through Presentation slides on ██████████.pdf		#665144 Partial SSN exposed through Presentation slides on ██████████.pdf
#672629 Online training material disclosing username and password.pdf		#672629 Online training material disclosing username and password.pdf
#674741 Examples directory is PUBLIC on https___████████mil, leading to multiple vulns.pdf		#674741 Examples directory is PUBLIC on https___████████mil, leading to multiple vulns.pdf
README.md		README.md

Ravirajrao/DoD-Disclosed-Reports-from-HackerOne

Folders and files

Latest commit

History

Repository files navigation

DoD-Disclosed-Reports-from-HackerOne

About

Resources

Stars

Watchers

Forks