Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mars' disclosed a bug submitted by b'0xs4m' 
b"IDOR ' can change any account email and cannot retrieve his account and access it ' at https://www.miroyalcanin.cl/"

23 Jun 2023

b'Nextcloud' disclosed a bug submitted by b'nickvergessen' 
b'user_oidc app is missing bruteforce protection'

23 Jun 2023

b'TikTok' disclosed a bug submitted by b'rektile404' 
b'Improper user validation on mentions and hashtags'

22 Jun 2023

b'Rocket.Chat' disclosed a bug submitted by b'sachinrajput' 
b'Reflected Cross-Site Scripting(CVE-2022-32770 )'

22 Jun 2023

b'Mars' disclosed a bug submitted by b'0xs4m' 
b"IDOR ' can add animal to other account ' at https://www.miroyalcanin.cl/"

22 Jun 2023

b'Node.js' disclosed a bug submitted by b'tniessen' 
b'OpenSSL engines can be used to bypass and/or disable the permission model'

22 Jun 2023

b'Nextcloud' disclosed a bug submitted by b'akshayravic09yc47' 
b'Open redirect on "Unsupported browser" warning'

22 Jun 2023

b'Nextcloud' disclosed a bug submitted by b'rullzer' 
b'End-to-end encrypted file-drops can be made inaccessible'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'HTML injection in title of reader view'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'Universal XSS through FIDO U2F register from subframe'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'Phishing/Malware site blocking on Brave iOS can be bypassed with trailing dot in hostname'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'Onion-Location header allows to open arbitrary URLs including chrome:'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'XSS on Brave Today through custom RSS feed'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'New XSS vector in ReaderMode with %READER-TITLE-NONCE%'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'Universal XSS with Playlist feature'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'XSS on internal: privileged origin through reader mode'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'Security token and handler name leak from window.braveBlockRequests'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'Persistent user tracking is possible using window.caches, by avoiding Brave Shields'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'UI spoofing by showing sms:/tel: dialog on another website'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'Brave Shield for iOS is weak against IDN homograph attacks'

22 Jun 2023

1 ... 55 56 57 58 59 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM