Post #183 753 Aug 7, 2026, 19:35 UTC https://hackerone.com/reports/3782701Прикольный репорт на rce в Mozilla HackerOne Mozilla disclosed on HackerOne: Unauthenticated RCE in Taskcluster... ## Summary The public GraphQL endpoint at `/graphql` allows an unauthenticated caller to execute arbitrary JavaScript inside the web-server's Node.js process. The query argument `filter` is a... ❤ 4 🔥 3