Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mozilla Core Services' disclosed a bug submitted by b'unexpectedbuffercon_' 
b'Missing Function Level Access Control in Mozilla formula containsRegular Expression Denial of Service (CVE-2023-25166)'

27 Sep 2023

b'Nextcloud' disclosed a bug submitted by b'themarkib0x0' 
b'Existance of calendars and addressbooks can be checked by unauthenticated users '

26 Sep 2023

b'Nextcloud' disclosed a bug submitted by b'cyber_world_01' 
b'No Rate Limit On Forgot Password on https://apps.nextcloud.com'

26 Sep 2023

b'Nextcloud' disclosed a bug submitted by b'shuvam321' 
b'Nextcloud All-In-One path disclosure of internal frontend'

26 Sep 2023

b'Nextcloud' disclosed a bug submitted by b'krrish_hackk' 
b'Dos in Form Submission at https://nextcloud.com/instant-trial/'

26 Sep 2023

b'LinkedIn' disclosed a bug submitted by b'find_me_here' 
b'Can VIEW Videos on LinkedIn Learning that Require a Subscription Without having to Subscribe Via `SHARE features`'

25 Sep 2023

b'LinkedIn' disclosed a bug submitted by b'headhunter' 
b'LinkedIn users primary email + full name visibilty'

25 Sep 2023

b'LinkedIn' disclosed a bug submitted by b'vampirex' 
b'HTTP Request Smuggling (CL.0) leads to mass redirect users to attacker server without user interaction'

25 Sep 2023

b'LinkedIn' disclosed a bug submitted by b'headhunter' 
b'Access to resumes applied through LinkedIn Jobs'

22 Sep 2023

b'Nord Security' disclosed a bug submitted by b'yozzo_' 
b'Email verification bypass for manual connection setup service credentials'

22 Sep 2023

b'Slack' disclosed a bug submitted by b'd3f4u17' 
b'Hashed data exposure via WebSockets to Workspace Members'

21 Sep 2023

b'Basecamp' disclosed a bug submitted by b'neex' 
b'AWS keys and user cookie leakage via uninitialized memory leak in outdated librsvg version in Basecamp'

21 Sep 2023

b'Mozilla Critical Services' disclosed a bug submitted by b'anish_kosaraju' 
b'If rate limit is hit, IP address is leaked to anyone who tries to login'

20 Sep 2023

b'curl' disclosed a bug submitted by b's0urc3_' 
b'NULL Pointer dereference in idn.c'

20 Sep 2023

b'Mozilla Critical Services' disclosed a bug submitted by b'r3dpars3c' 
b'Stored Xss on bugzilla.mozilla.org via comment edit feature from non-admin to admin.'

20 Sep 2023

b'Mozilla Core Services' disclosed a bug submitted by b'lamscun' 
b'IDOR - send a message on behalf of other user '

20 Sep 2023

b'X (Formerly Twitter)' disclosed a bug submitted by b'greytesla' 
b"Improper santization of edit in list feature at twitter leads to delete any twitter user's list cover photo."

18 Sep 2023

b'X (Formerly Twitter)' disclosed a bug submitted by b'mirhat' 
b'Twitter Subscriptions Information Disclosure'

18 Sep 2023

b'Cosmos' disclosed a bug submitted by b'strikeout' 
b'Circuit Breaker Authorization Issue'

18 Sep 2023

1 2 3 ... 673

BY DENIS WERNER - @NOBBD - IMPRESSUM