Now on Twitter

the unofficial HackerOne disclosure timeline.

X

lemlist disclosed a bug submitted by omarelfarsaoui 
[app.lemlist.com] Improper handling of payment lead to bypass payment

17 May 2022

TikTok disclosed a bug submitted by naaash 
Privilege Escalation on TikTok for Business

16 May 2022

Automattic disclosed a bug submitted by sawrav-chowdhury 
Site information's Display Name section vulnerable for XSS attacks and HTML Injections.

16 May 2022

lemlist disclosed a bug submitted by mr23r0 
Security misconfiguration

16 May 2022

curl disclosed a bug submitted by sybr 
CVE-2022-27781: CERTINFO never-ending busy-loop

16 May 2022

Cloudflare Public Bug Bounty disclosed a bug submitted by albertspedersen 
HTTP Request Smuggling in Transform Rules using hexadecimal escape sequences in the concat() function

16 May 2022

SMTP2GO BBP disclosed a bug submitted by mrrobot2050 
Origin IP found, WAF Cloudflare Bypass

15 May 2022

curl disclosed a bug submitted by iylz 
Credential leak on redirect

14 May 2022

Shopify disclosed a bug submitted by zambo 
Disclose STUFF member name and make actions.

14 May 2022

Shopify disclosed a bug submitted by zambo 
Disclose customer orders details by shopify chat application.

14 May 2022

Consensys disclosed a bug submitted by polem4rch 
Public Postman Api Collection Leaks Internal access to https://assets-paris-dev.codefi.network/

14 May 2022

MTN Group disclosed a bug submitted by ibrahimatix0x01 
Download full backup [Mtn.co.rw]

14 May 2022

curl disclosed a bug submitted by iylz 
error parse uri path in curl

13 May 2022

curl disclosed a bug submitted by pappacoda 
Memory leak in CURLOPT_XOAUTH2_BEARER

13 May 2022

curl disclosed a bug submitted by nyymi 
Cookie injection from non-secure context

13 May 2022

GitHub Security Lab disclosed a bug submitted by luchua 
[Java] CWE-016: Query to detect insecure configuration of Spring Boot Actuator

13 May 2022

GitHub Security Lab disclosed a bug submitted by ihsinme 
[CPP]: Add query for CWE-754: Improper Check for Unusual or Exceptional Conditions when using functions scanf

13 May 2022

GitHub Security Lab disclosed a bug submitted by luchua 
[Java]: CWE-552 Add sources and sinks to detect unsafe getResource calls in Java EE applications

13 May 2022

GitHub Security Lab disclosed a bug submitted by ihsinme 
[CPP]: Add query for CWE-190: Integer Overflow or Wraparound when using transform after operation

13 May 2022

1 2 3 ... 608

BY DENIS WERNER - @NOBBD - IMPRESSUM