MTN Group · disclosed reports
Information Disclosure
23 disclosed reports · $0 paid
Out of date: the sync last ran 4 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open MTN Group on HackerOne- reports
- 23
- paid a bounty
- 0
Every one of the 23 is a mark on the map. Named now: 1 to 23, most upvoted first.
- Information disclosure due to debug mode enabled at Laravel instance https://mpos.mtn.co.sz/
- Information disclosure via enabled Django Debug Mode
- Exposure Of Admin Username & Password
- CVE-2010-1429 JBoss Insecure Storage of Sensitive Information on ips.mtn.co.ug
- Wordpress users Disclosure [ /wp-json/wp/v2/users/ ]
- information discloure via logs files at ==> https://ihelp.mtnbusiness.com/logfiles/Log_21-06-2021.txt
- Leaking usernames through endpoints Wordpress
- Wordpress users Disclosure [ /wp-json/wp/v2/users/ ] Not Resolved ()
- Information Disclosure Leads To User Data Leak
- PHP Info Exposing Secrets at https://radio.mtn.bj/info
- Firebase Database Takeover in https://pulseradio.mtn.co.ug/
- Accessible Restricted directory on [bcm-bcaw.mtn.cm]
- Insecure Storage of Sensitive Information on lonestarcell.com server
- firebase credentials leaks @ https://mpulse.mtnonline.com
- Information disclosure through django debug mode
- Exposed .bash_history at http://21days2017.mtncameroon.net/.bash_history
- Information Disclosure Microsoft IIS Server service.cnf in a mtn website
- firebase credentials leaks @ ███████
- Insecure crossdomain.xml on https://vdc.mtnonline.com/
- Upload directory of Mtn.ci
- Wordpress users disclosure from json and xml file
- Exposed gitlab repo at https://adammanco.mtn.com/api/v4/projects
- Upload directory of Mtn.co.sz has listing enabled
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.