Stored XSS on bugzilla.mozilla.org via comment edit feature | by @r3dpars3c

Channel:
Philippines Japz Divino
Subscribers:
38,500
Published on ● Video Link: https://www.youtube.com/watch?v=l5O9G32VHOg


Duration: 0:24
673 views
15

#bugbounty #bugbounty #infosec

Bounty amount: undisclosed (bounty range for rated severity is 0 - $500 according to the program policy)

This is a publicly disclosed report from HackerOne, see the report reference below:

Report reference: https://hackerone.com/reports/2111291
Researcher: https://hackerone.com/r3dpars3c
Twitter: https://twitter.com/R3dpars3c



Other Videos By Japz Divino


2025-01-01Countdown to Cyber Success: Bug Bounties for the New Year! | Philippines HackerOne Club Webinar #1
2024-07-24888domino GAME REVIEW 2024 | SCATTER NA PWEDE MAG CASH IN GAMIT ANG CRYPTO
2023-09-21Stored XSS on bugzilla.mozilla.org via comment edit feature | by @r3dpars3c
2023-09-20IDOR - Send a message on behalf of other user by @lamscun (Bounty: $500 - $1,000)
2023-08-29$2,500 HackerOne IDOR - Delete all licenses and certifications of H1 users
2023-08-18$1,000 HackerOne Bounty | Viewing redacted username information
2023-08-07$500 HackerOne Bounty "I want to redact all usernames" Vulnerability #bugbounty
2023-07-13HackTheBox Sending Unlimited Respect Vulnerability by Ameer (@0x1877)
2023-07-04Getting email address of any HackerOne user | $7500 bounty #dupes #bugbounty #disclosure
2023-06-25Tara ML.. Long time no live stream! namiss ko kayo :)
2023-06-08SAKUPIN KO CHANNEL MO
2023-03-10MAP2EARN: Map the world, own and monetize the data | 2023 hottest web3 project
2023-02-20Xeno Dragon New NFT Game Review 2023
2023-01-10WIKIBIT presents THE BREAKING BAD | Topic: XIAN GAZA SCAMS ?
2022-12-16KOF ARENA: Netmarble Play To Earn Game! | Steam #002
2022-12-10MetaPlayerOne: How to Join a WEB3 Community | DAO Setup for Influencers with $MEU token raffle!
2022-12-10Modern World: New NFT Game on WAX Blockchain
2022-12-05KOF ARENA: New Play-To-Earn game by Netmarble! | Stream 001
2022-12-04WikiBit: Cotton Candy Airdrop Event | $5,000 Total Giveaway!
2022-12-01AutoChess MOBA: Soft Launch | DOTA on Mobile?
2022-11-26Live: WikiBit Presents | Japz Blockchain Jeopardy | GCash reward up to 1000 Php


Tags:
security
owasp
appsec
penetration testing
web hacking
penetration testing cyber security