Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Azbuka Vkusa disclosed a bug submitted by haxta4ok00 
Reflected XSS in photogallery component on [https://market.av.ru]

01 Dec 2021

VK.com disclosed a bug submitted by executor 
.....

01 Dec 2021

VK.com disclosed a bug submitted by executor 
.

01 Dec 2021

VK.com disclosed a bug submitted by azimoff 
/ .

01 Dec 2021

VK.com disclosed a bug submitted by azimoff 
XSS .

01 Dec 2021

VK.com disclosed a bug submitted by azimoff 
(50x50) .

01 Dec 2021

VK.com disclosed a bug submitted by azimoff 
XSS .

01 Dec 2021

Glassdoor disclosed a bug submitted by bombon 
[https://www.glassdoor.com] - Web Cache Deception Leads to gdtoken Disclosure

30 Nov 2021

Acronis disclosed a bug submitted by spookhorror 
IDOR vulnerability (Price manipulation)

30 Nov 2021

U.S. Dept Of Defense disclosed a bug submitted by palaziv 
Unauthenticated Access to Admin Panel Functions at https:///

29 Nov 2021

U.S. Dept Of Defense disclosed a bug submitted by palaziv 
Unauthenticated Access to Admin Panel Functions at https:///

29 Nov 2021

U.S. Dept Of Defense disclosed a bug submitted by dmonsterrr 
Expired SSL Certificate allows credentials steal

29 Nov 2021

MCUboot disclosed a bug submitted by r0m50 
private keys exposed on the GitHub repository

27 Nov 2021

XVIDEOS disclosed a bug submitted by sbakhour 
CSRF on delete friend requests - Not protected with CSRF Token

26 Nov 2021

Shopify disclosed a bug submitted by fr4via 
Insufficient session expiration in the **com.shopify.ping** android app

26 Nov 2021

Shopify disclosed a bug submitted by stapia 
A non-privileged user may create an admin account in Stocky

25 Nov 2021

Shopify disclosed a bug submitted by youstin 
Sidekiq dashboard exposed at notary.shopifycloud.com

25 Nov 2021

Traffic Factory disclosed a bug submitted by vavkamil 
WordPress Plugin Update Confusion at trafficfactory.com

25 Nov 2021

Mail.ru disclosed a bug submitted by ghost_shell 
Cross-site Scripting (XSS) - Stored

25 Nov 2021

1 2 3 ... 580

BY DENIS WERNER - @NOBBD - IMPRESSUM