Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Mail.ru disclosed a bug submitted by uddeshaya001 
[ii.worki.ru ] emarsys subdomain takeover

28 Sep 2021

MTN Group disclosed a bug submitted by devhug 
[mtn.com.af] Multiple vulnerabilities allow to Application level DoS

28 Sep 2021

Internet Bug Bounty disclosed a bug submitted by ouyang 
CVE-2021-3711: SM2 decrypt buffer overflow

27 Sep 2021

Localize disclosed a bug submitted by thd3r7 
Stored XSS in Document Title

27 Sep 2021

Tor disclosed a bug submitted by sickcodes 
Tor Browser using --log or --verbose logs the exact connection time a client connects to any v2 domains.

27 Sep 2021

DuckDuckGo disclosed a bug submitted by webklex 
com.duckduckgo.mobile.android - Cache corruption

26 Sep 2021

MTN Group disclosed a bug submitted by alimanshester 
Reflected Cross-Site scripting in : mtn.bj

26 Sep 2021

QIWI disclosed a bug submitted by lalit2020 
CVE-2020-3187 - unauthenticated arbitrary file deletion in Cisco

24 Sep 2021

Brave Software disclosed a bug submitted by bhatiagaurav1211 
unclaimed s3 bucket takeover in the 3 js file located on the github page of brave software

24 Sep 2021

Redtube disclosed a bug submitted by kevsecurity 
Deserialization of untrusted data at https://www.redtube.com/media/hls?s=data

24 Sep 2021

Concrete CMS disclosed a bug submitted by egix 
Phar Deserialization Vulnerability via Logging Settings

24 Sep 2021

curl disclosed a bug submitted by monnerat 
CVE-2021-22946: Protocol downgrade required TLS bypassed

24 Sep 2021

curl disclosed a bug submitted by monnerat 
CVE-2021-22947: STARTTLS protocol injection via MITM

24 Sep 2021

GitLab disclosed a bug submitted by maruthi12 
Guest Users can create issues for Sentry errors and track their status

24 Sep 2021

LINE disclosed a bug submitted by lynx_vn 
DoS of LINE client for Android via message containing multiple unicode characters (0x0e & 0x0f)

24 Sep 2021

GitHub Security Lab disclosed a bug submitted by someone 
[Python] CWE-522: Insecure LDAP Authentication

23 Sep 2021

Nextcloud disclosed a bug submitted by rtod 
End to end encryption public key is not properly verified on Desktop and Android

23 Sep 2021

Nextcloud disclosed a bug submitted by rtod 
Clients do not verify server public key

23 Sep 2021

Myndr disclosed a bug submitted by azimuthub 
No Rate Limit On dashboard.myndr.net/auth

23 Sep 2021

1 2 3 ... 570

BY DENIS WERNER - @NOBBD - IMPRESSUM