Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Revive Adserver' disclosed a bug submitted by b'l4stb1t' 
b'Multiple cross-site scripting (XSS) vulnerabilities in Revive Adserver'

13 Sep 2023

b'Tor' disclosed a bug submitted by b'andreien' 
b"'Request English versions of web pages for enhanced privacy' keeps previous (grayed out) settings "

13 Sep 2023

b'HackerOne' disclosed a bug submitted by b'0verw4tch' 
b'IDOR: Authorization Bypass in LockReport Mutation for public reports'

13 Sep 2023

b'TikTok' disclosed a bug submitted by b'rioncool22' 
b'Stored XSS Via Ads Account Name'

12 Sep 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'sayoojbkumar' 
b'SSRF Vulnerability through Connection test feature'

12 Sep 2023

b'Radancy' disclosed a bug submitted by b'mouhannadlrx' 
b'Admin account/panel takeOver and Doing actions in admin panel via DOM-based XSS'

12 Sep 2023

b'Mozilla Core Services' disclosed a bug submitted by b'griffinf' 
b'Mozilla Mastodon Staging Instance Admin API Key Disclosure Through Slack'

11 Sep 2023

b'Mozilla Critical Services' disclosed a bug submitted by b'saiteja1231323' 
b'Response Manipulation to enable Account recovery key with out current password'

11 Sep 2023

b'Tennessee Valley Authority' disclosed a bug submitted by b'sailesh01nik' 
b'No Rate Limit On Forgot Password Page'

11 Sep 2023

b'Tennessee Valley Authority' disclosed a bug submitted by b'tvmbug' 
b'xss reflected - pq.tva.com'

11 Sep 2023

b'inDrive' disclosed a bug submitted by b'trustworthy' 
b'the domain is truck-admin.eu-east-1.indriverapp.com and Enter the management system of the blasting mobile phone verification code'

11 Sep 2023

b'Node.js' disclosed a bug submitted by b'rafaelgss' 
b'process.binding() can bypass the permission model through path traversal'

10 Sep 2023

b'Node.js' disclosed a bug submitted by b'rafaelgss' 
b'fs.statfs bypasses Permission Model'

10 Sep 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'leodog896' 
b'Dependency Policy Bypass via process.binding'

09 Sep 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'bean-zhang' 
b"Argocd's web terminal session doesn't expire"

09 Sep 2023

b'Nextcloud' disclosed a bug submitted by b'carl_schwan' 
b'Permissions not respected when copying entire group folders'

09 Sep 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xmaruf' 
b'CVE-2023-24488 xss on https:///'

08 Sep 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'maskedpersian' 
b'stored cross site scripting in https://.edu'

08 Sep 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fklet' 
b'XSS Reflected'

08 Sep 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'hackdog0ne' 
b'Blind Sql Injection in https:///qsSearch.aspx'

08 Sep 2023

1 ... 52 53 54 55 56 ... 724

BY DENIS WERNER - @NOBBD - IMPRESSUM