Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Mail.ru disclosed a bug submitted by official_dhivish 
Subdomain Takeover

25 Jan 2022

TikTok disclosed a bug submitted by blubluuu 
Cross site scripting via file upload in subdomain ads.tiktok.com

25 Jan 2022

Imgur disclosed a bug submitted by blackfly_ 
No length on password

24 Jan 2022

Internet Bug Bounty disclosed a bug submitted by chamal 
Buffer Overflow in optimized_escape_html method

22 Jan 2022

Imgur disclosed a bug submitted by whoami991 
xss reflected on imgur.com

22 Jan 2022

Weblate disclosed a bug submitted by joshmcman08 
hosted.weblate.org display of unfiltered results

21 Jan 2022

Stripe disclosed a bug submitted by dk82hg 
Email change or personal data change on the account.

21 Jan 2022

Recorded Future disclosed a bug submitted by bombon 
[https://app.recordedfuture.com] - Reflected XSS via username parameter

21 Jan 2022

QIWI disclosed a bug submitted by rivalsec 
disclosing clients' secret keys https://stage-uapi.tochka.com:2000/

21 Jan 2022

Internet Bug Bounty disclosed a bug submitted by tniessen 
Invalid handling of X509_verify_cert() internal errors in libssl (CVE-2021-4044)

20 Jan 2022

Shopify disclosed a bug submitted by bepresent 
Reflected XSS online-store-git.shopifycloud.com

20 Jan 2022

Shopify disclosed a bug submitted by mester_x 
Direct Access To admin Dashboard

20 Jan 2022

Shopify disclosed a bug submitted by nagli 
Stored XSS at https://linkpop.com

20 Jan 2022

TikTok disclosed a bug submitted by lu3ky-13 
Cross-site Scripting (XSS) - Stored on ads.tiktok.com in Text field

20 Jan 2022

GitHub Security Lab disclosed a bug submitted by npesaresi 
Yet another SSRF query for Javascript

19 Jan 2022

GitHub Security Lab disclosed a bug submitted by npesaresi 
Yet another SSRF query for Go

19 Jan 2022

GitHub Security Lab disclosed a bug submitted by luuliiromee 
Yet another SSRF query for Javascript

19 Jan 2022

GitHub Security Lab disclosed a bug submitted by ciohianz 
Yet another SSRF query for Javascript

19 Jan 2022

GitHub Security Lab disclosed a bug submitted by avada 
Yet another SSRF query for Javascript

19 Jan 2022

1 2 3 ... 590

BY DENIS WERNER - @NOBBD - IMPRESSUM