Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Semrush' disclosed a bug submitted by b'a_d_a_m' 
b'IDOR vulnerability reveals additional information'

07 Mar 2024

b'Mozilla Core Services' disclosed a bug submitted by b'ryujinx' 
b'IDOR on Delete Email address features'

07 Mar 2024

b'Semrush' disclosed a bug submitted by b'a_d_a_m' 
b'Lack of sanitization of the billing address in pdf invoice'

06 Mar 2024

b'Semrush' disclosed a bug submitted by b'a_d_a_m' 
b'IDOR allows information disclosure'

05 Mar 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'bart' 
b'http: Reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks'

05 Mar 2024

b'A.S. Watson Group ' disclosed a bug submitted by b'jfran_cbit' 
b'Access to internal info via Graphql on https://tng-api.watsons.com.my'

05 Mar 2024

b'Mars' disclosed a bug submitted by b'deb0con' 
b'CVE-2022-21371: Oracle WebLogic Server Local File Inclusion'

04 Mar 2024

b'SideFX' disclosed a bug submitted by b'0xchoudhary' 
b"Session Doesn't expire after 2fa and also other session can change passsword "

02 Mar 2024

b'X (Formerly Twitter)' disclosed a bug submitted by b'bugra' 
b'Able to see Twitter Circle tweets due to improper access control on the "FavoriteTweet" endpoint'

01 Mar 2024

b'IBM' disclosed a bug submitted by b'nightm4re' 
b'XSS Refelected on jazz.net'

29 Feb 2024

b'IBM' disclosed a bug submitted by b'nepalihacker0x01' 
b'Improper Authentication on Alertmanager instance'

29 Feb 2024

b'IBM' disclosed a bug submitted by b'bugoverflow' 
b'Jenkins server access due to weak password'

29 Feb 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'vx01' 
b'Command Injection using malicious hostname in expanded proxycommand'

28 Feb 2024

b'LinkedIn' disclosed a bug submitted by b'domg' 
b'Stored XSS on LinkedIn App via iframe tag in Article'

28 Feb 2024

b'Daimler Truck' disclosed a bug submitted by b'7absec' 
b'Server-based source code disclosures'

28 Feb 2024

b'Daimler Truck' disclosed a bug submitted by b'7absec' 
b'Time-based SQL Injection'

28 Feb 2024

b'JetBlue' disclosed a bug submitted by b'asce21' 
b'Sensitive information disclosure on grafana'

26 Feb 2024

b'Automattic' disclosed a bug submitted by b'renniepak' 
b'DOM XSS on multiple Automattic domains through postMessages'

26 Feb 2024

b'PortSwigger Web Security' disclosed a bug submitted by b'priyanshusharma9789' 
b'CSP Bypass and escalation of https://hackerone.com/reports/2279346'

23 Feb 2024

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'ryotak' 
b'Arbitrary file read from Cloudflare Pages build environment'

23 Feb 2024

1 ... 57 58 59 60 61 ... 747

BY DENIS WERNER - @NOBBD - IMPRESSUM