Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'curl' disclosed a bug submitted by b'kurohiro' 
b'CVE-2024-8096: OCSP stapling bypass with GnuTLS'

11 Sep 2024

b'MTN Group' disclosed a bug submitted by b'alitoni224' 
b'cross site scripting reflected '

09 Sep 2024

b'MercadoLibre' disclosed a bug submitted by b'valent1ne' 
b'Stored XSS in reclamos'

09 Sep 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'sw0rd1ight' 
b'CVE-2024-41937: Apache Airflow: Stored XSS Vulnerability on provider link'

07 Sep 2024

b'Monero' disclosed a bug submitted by b'selmelc' 
b'[Monero wallet RPC] File precreation to file ownership and credentials leak'

04 Sep 2024

b'Mozilla' disclosed a bug submitted by b'devil_think' 
b'Privates Emails of Moz Workers Leaked in Public file'

04 Sep 2024

b'GitLab' disclosed a bug submitted by b'cybxis' 
b'Login email verification bypass via `/oauth/token`.'

03 Sep 2024

b'MTN Group' disclosed a bug submitted by b'0xmekky' 
b'Reflected cross site scripting (XSS) attacks Reflected XSS attacks, '

30 Aug 2024

b'MTN Group' disclosed a bug submitted by b'0xmekky' 
b'PHP info page disclosure in https://41.242.90.8/'

30 Aug 2024

b'MTN Group' disclosed a bug submitted by b'deb0con' 
b'CVE-2018-0296 Cisco ASA Denial of Service & Path Traversal vulnerable on [mtn.co.ug]'

30 Aug 2024

b'MTN Group' disclosed a bug submitted by b'deb0con' 
b'CVE-2010-1429 JBoss Insecure Storage of Sensitive Information on ips.mtn.co.ug'

30 Aug 2024

b'HackerOne' disclosed a bug submitted by b'saurabhb' 
b'Private data related to program exposed via /reports/<id>.json endpoint to external user participant'

30 Aug 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'iamunixtz' 
b'Blind Sql Injection in https://'

29 Aug 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thpless' 
b'XSS found for https://'

29 Aug 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xelkot' 
b'XSS on '

29 Aug 2024

b'Acronis' disclosed a bug submitted by b'godiego' 
b'[forum.acronis.com] JNDI Code Injection due an outdated log4j component'

28 Aug 2024

b'Acronis' disclosed a bug submitted by b'mikkocarreon' 
b'[CVE-2021-44228] Arbitrary Code Execution on ng01-cloud.acronis.com'

28 Aug 2024

b'Acronis' disclosed a bug submitted by b'mmg' 
b'SQL injection in https://demor.adr.acronis.com/ via the username parameter'

28 Aug 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'noentry' 
b'CVE-2024-7347: Buffer overread in the ngx_http_mp4_module'

27 Aug 2024

1 2 3 ... 708

BY DENIS WERNER - @NOBBD - IMPRESSUM