Dust Program Statistics

View program

10 total issues disclosed

$0 total paid publicly

Most disclosed (4 disclosures) — Improper Access Control - Generic

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
BAC – Bypass chatbot restrictions via unauthorized mention injection None supplied yoyomiski Medium 2025-05-06
Stored XSS in File Upload Leads to Privilege Escalation and Full Workspace Takeover Cross-site Scripting (XSS) - Stored sjalu High 2025-05-02
Privilege Persistence via Cloned Agent Improper Access Control - Generic yoyomiski Medium 2025-04-30
Improper Session Invalidation – Auto Sign-In Without Credentials After Logout (Affects Chrome & Firefox) Insufficient Session Expiration pent0ss Medium 2025-04-29
Privilege Escalation leads to Unauthorized Access to Private Conversations By any Regular user [Read , Edit and Delete] Privilege Escalation 0xsom3a Critical 2025-04-29
User Limit Bypass via Pending Invitations in Workspace System Business Logic Errors kymu_ Medium 2025-04-29
Race Condition in Folder Creation Allows Bypassing Folder Limit Business Logic Errors 0xsom3a Medium 2025-04-29
Privilege Escalation in Edit and Create Secret Endpoints Leads to Unauthorized Secret Modification Improper Access Control - Generic 0xsom3a High 2025-04-24
UI flaw allows unauthorized users to add documents to restricted folders Improper Access Control - Generic kymu_ Medium 2025-04-23
Unauthorized Table Creation by Member Improper Access Control - Generic mous_haxk Medium 2025-04-23