Manual Approval Thread

[mandarin_canard]

Hello,

Can you check 1575261 please ?

[Esss_ayy]

Hello,
Greetings Admin,

Kindly review below mentioned reports, as most of reports are having xmlrpc enabled on post request and some are having user info disclosure through rest API, In past such types of reports were getting accepted and from last few weeks i have noticed that they are closed as non reproduce and my hundreds of reports are wasted as such.

1579651
1579650
1579649
1579648
1579647
1575848
1575829
1575602

Kindly review them, Will wait for your kind response.

Regards
Ali

[ahfibahru]

closed

[amlnspqr]

1405118 1451899 1592860 please

[Esss_ayy]

Hello Admin,

Kindly approve these reports, these are working xss reports.
1592933

 1592924

 1592922

[raj1997upadhyay]

Hello Admin,
Can you please check following reports it's in manual checking,
1601227
1601238
Able to see php.ini file ( configuration files )

[x1admin]

approved

[JonLaing4]

Hello,

Please approve ID 1607551 - xss can be triggered by registering with the name of an xss payload as per screenshot:

[donpavlas]

Hi, my submission 1606422 is declined as "can't be reproduced". Please double check it or tell me, whats the issue here. The url arne******.de/.git/config shows, that the git repository is publicly available, which is a real threat.

Thank you!

[sotblad]

Hey, please check 1612380. It's rejected and marked as "Can't reproduce vulnerability" while it's a valid vulnerability.
I'm in talks with the website and they told me to open these vulnerability reports here.