Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'kesselb' 
b'Open redirect when logging in with user_oidc'

15 Nov 2024

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'Attachments folder for Text app is accessible on Files Drop/Password protected shares'

15 Nov 2024

b'Nextcloud' disclosed a bug submitted by b'shushangw' 
b'Mail auto configurator can be tricked into sending account information to wrong servers '

15 Nov 2024

b'MTN Group' disclosed a bug submitted by b'offensiveops' 
b'Unauthenticated phpinfo()files could lead to ability file read at h3f6.n1.ips.mtn.co.ug '

15 Nov 2024

b'HackerOne' disclosed a bug submitted by b'raditz' 
b'Takeover of hackerone.engineering via Medium '

14 Nov 2024

b'LinkedIn' disclosed a bug submitted by b'sevada797' 
b'Can see phone numbers of others by providing mail address'

13 Nov 2024

b'Doppler' disclosed a bug submitted by b'mr_root_0101' 
b'Availability Impact from Exploiting Project Name Vulnerabilities'

13 Nov 2024

b'Acronis' disclosed a bug submitted by b'theelgo64' 
b'IDOR in backup recovery functionality'

13 Nov 2024

b'Mozilla' disclosed a bug submitted by b'vanhoefm' 
b'Leakage of traffic in plaintext towards the IP address of VPN server'

08 Nov 2024

b'Mozilla' disclosed a bug submitted by b'vanhoefm' 
b'Leaking VPN traffic through non-RFC1918 local IP addresses'

08 Nov 2024

b'curl' disclosed a bug submitted by b'rootgh0st' 
b'Buffer overflow in strcpy'

07 Nov 2024

b'AWS VDP' disclosed a bug submitted by b'zolaer9527' 
b'A potential risk in the experimental-programmatic-access-ccft which can be used to privilege escalation.'

06 Nov 2024

b'curl' disclosed a bug submitted by b'newfunction' 
b'CVE-2024-9681: HSTS subdomain overwrites parent cache entry'

06 Nov 2024

b'Acronis' disclosed a bug submitted by b'kindone' 
b' Potential XSS Vulnerability in Acronis Login Callback URL'

06 Nov 2024

b'Acronis' disclosed a bug submitted by b'kindone' 
b'Potential XSS in redirect_url Parameter'

06 Nov 2024

b'curl' disclosed a bug submitted by b'reterix' 
b'Exploitable Format String Vulnerability in curl_mfprintf Function'

06 Nov 2024

b'TikTok' disclosed a bug submitted by b'ibrahim0936356' 
b'CSRF in ticket function'

05 Nov 2024

b'Automattic' disclosed a bug submitted by b'shivangmauryaa' 
b'Open redirect via redirect_to parameter in tumblr.com'

05 Nov 2024

b'MacTaggart Scott' disclosed a bug submitted by b'goedix' 
b'Overwrite any file of the web server'

05 Nov 2024

b'curl' disclosed a bug submitted by b'newfunction' 
b'When curl uses Schannel as TLS backend, it fails to enforce TLS 1.3 cipher suite selections correctly'

04 Nov 2024

1 ... 55 56 57 58 59 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM