Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'inDrive' disclosed a bug submitted by b'maxdha' 
b'#2 XSS on watchdocs.indriverapp.com'

11 Apr 2024

b'inDrive' disclosed a bug submitted by b'maxdha' 
b'#3 XSS on watchdocs.indriverapp.com'

11 Apr 2024

b'8x8' disclosed a bug submitted by b'fo00x' 
b'Unprotected Atlantis Server at https://152.70..'

11 Apr 2024

b'Node.js' disclosed a bug submitted by b'bart' 
b'"Assertion failed" in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash'

08 Apr 2024

b'Snapchat' disclosed a bug submitted by b'hulkvision_' 
b'Intent Leads To Unauthorised Video Call Initiation Leaking Surrounding Informations Of Victim'

05 Apr 2024

b'TikTok' disclosed a bug submitted by b'm7x' 
b'Reflected XSS on Pangle Endpoint '

05 Apr 2024

b'Tools for Humanity' disclosed a bug submitted by b'toormund' 
b'Race Condition Enables Bypassing Verification Check'

04 Apr 2024

b'PortSwigger Web Security' disclosed a bug submitted by b'0xd0m7' 
b'[portswigger.net] Path Traversal al /cms/audioitems'

04 Apr 2024

b'TikTok' disclosed a bug submitted by b'dxcoder' 
b"Using Branded Hashtag Feature User Partnered with Account Manager Can View Videos Uploaded By A Private TikTok Account If 'item_id' Is Known"

03 Apr 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc'

29 Mar 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'hunt1' 
b'Libuv: Improper Domain Lookup that potentially leads to SSRF attacks'

29 Mar 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'frankyueh' 
b'CVE-2024-2466: TLS certificate check bypass with mbedTLS (reward request)'

29 Mar 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'fullmetal5' 
b'CVE-2024-2379: QUIC certificate check bypass with wolfSSL'

29 Mar 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'dfandrich' 
b'Usage of disabled protocol in curl'

29 Mar 2024

b'HackerOne' disclosed a bug submitted by b'nitsec7' 
b'New Hacktivity features:Bounty rewards leakage Where programs doesnt decide to disclose bounty in limited disclosure report'

28 Mar 2024

b'curl' disclosed a bug submitted by b'iylz' 
b'cookie is sent on redirect'

28 Mar 2024

b'curl' disclosed a bug submitted by b'dfandrich' 
b'CVE-2024-2004: Usage of disabled protocol'

27 Mar 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2024-0853: OCSP verification bypass with TLS session reuse'

27 Mar 2024

b'curl' disclosed a bug submitted by b'w0x42' 
b'HTTP/2 PUSH_PROMISE DoS'

27 Mar 2024

b'curl' disclosed a bug submitted by b'frankyueh' 
b'CVE-2024-2466: TLS certificate check bypass with mbedTLS'

27 Mar 2024

1 ... 54 55 56 57 58 ... 747

BY DENIS WERNER - @NOBBD - IMPRESSUM