Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Yelp' disclosed a bug submitted by b'mester_x' 
b"Object Level access control leads to reading user's full requests, sessions, and error messages"

18 Jan 2025

b'Internet Bug Bounty' disclosed a bug submitted by b'leixiao' 
b'CVE-2022-40604: Apache Airflow: Format String Vulnerability'

18 Jan 2025

b'Brave Software' disclosed a bug submitted by b'syarif07' 
b" Incorrect security UI of files' download source on brave MacOS"

16 Jan 2025

b'XVIDEOS' disclosed a bug submitted by b'nagu123' 
b'Lack of Rate Limiting on Account Creation Endpoint '

16 Jan 2025

b'Cosmos' disclosed a bug submitted by b'julianor' 
b'Attacker can use any non-enabled capability'

15 Jan 2025

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi' 
b'netrc and redirect credential leak'

15 Jan 2025

b'Flickr' disclosed a bug submitted by b'himu_xjjj' 
b'Information Disclosure: .dockerignore file is publicly accessible'

14 Jan 2025

b'Basecamp' disclosed a bug submitted by b'shezxi' 
b'Critical Data Breach - Big Data for all domains'

14 Jan 2025

b'Nextcloud' disclosed a bug submitted by b'offensiveops' 
b'Blind SSRF Vulnerability in Appstore Release Upload Form'

14 Jan 2025

b'Doppler' disclosed a bug submitted by b'clubbable' 
b'WAF bypass and java script incomplete handling of Unicode characters might leads to dom-xss'

13 Jan 2025

b'Trellix' disclosed a bug submitted by b'r4v' 
b'Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10'

12 Jan 2025

b'MTN Group' disclosed a bug submitted by b'tinopreter' 
b'Yet Another OTP code Leaked in the API Response'

08 Jan 2025

b'MTN Group' disclosed a bug submitted by b'tinopreter' 
b'SQL injection in URL path leads to Database Access'

08 Jan 2025

b'MTN Group' disclosed a bug submitted by b'tinopreter' 
b'OTP code Leaked in API Response '

08 Jan 2025

b'Mozilla' disclosed a bug submitted by b'jabiyev' 
b'Denial of Access to Static Resources via Cache Poisoning on addons.allizom.org'

08 Jan 2025

b'Mozilla' disclosed a bug submitted by b'dotxml' 
b'Bypass Email Verification on Add Email Monitoring'

07 Jan 2025

b'Internet Bug Bounty' disclosed a bug submitted by b'saurabhb' 
b'Apache Airflow: Sensitive Information Exposure in DAG Run Logs'

30 Dec 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'saurabhb' 
b'Secrets not masked in UI when sensitive variables are set via Airflow cli'

30 Dec 2024

b'Truecaller ' disclosed a bug submitted by b'marcotuliocnd' 
b'Lack of URL Validation in avatarUrl at /v4/profile'

28 Dec 2024

1 2 3 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM