Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'alone_h1' 
b'Any one can view collaborater email address via path /reports/<id>/participants '

01 Jun 2023

b'GitLab' disclosed a bug submitted by b'bull' 
b'Account takeover due to insufficient URL validation on RelayState parameter'

30 May 2023

b'Nextcloud' disclosed a bug submitted by b'unknownsh' 
b'Blind SSRF as normal user from mailapp'

30 May 2023

b'GitLab' disclosed a bug submitted by b'mike12' 
b'Stored XSS in merge request pages'

30 May 2023

b'GitLab' disclosed a bug submitted by b'mike12' 
b'Blind SSRF in FogBugz project import'

30 May 2023

b'GitLab' disclosed a bug submitted by b'mike12' 
b'Domain Takeover - gl-canary.freetls.fastly.net'

30 May 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi' 
b' CVE-2023-28320 - siglongjmp race condition'

26 May 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'albertspedersen' 
b'Privilege escalation to root in Pages build image v2'

26 May 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'bean-zhang' 
b'Authenticated but unauthorized users may enumerate Application names via the API'

25 May 2023

b'Kubernetes' disclosed a bug submitted by b'snoopysecurity' 
b'Git Arg Injection in kubernetes-sigs/release-sdk '

25 May 2023

b'Kubernetes' disclosed a bug submitted by b'gaffy' 
b'Bypass validation parts in AWS IAM Authenticator for Kubernetes'

25 May 2023

b'curl' disclosed a bug submitted by b'wct' 
b'CVE-2023-28319: UAF in SSH sha256 fingerprint check'

24 May 2023

b'LinkedIn' disclosed a bug submitted by b'ultrapowa' 
b'Entire database of emails exposed through URN injection'

22 May 2023

b'Expedia Group Bug Bounty' disclosed a bug submitted by b'maskopatol' 
b'https://www.wotif.com/vc/blog/info.php script is prone to reflected HTML/CSS injection and COOKIE leak'

20 May 2023

b'curl' disclosed a bug submitted by b'dhananjay09' 
b'Cache purge requests are not authenticated'

20 May 2023

b'Slack' disclosed a bug submitted by b'violet' 
b'Unauthorized access to GovSlack'

19 May 2023

b'Automattic' disclosed a bug submitted by b'riadalrashed' 
b'Stored XSS on wordpress.com'

19 May 2023

b'U.S. Department of State' disclosed a bug submitted by b'carpc' 
b'Impact of Using the PHP Function "phpinfo()" on System Security - PHP info page disclosure'

18 May 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'ksw9722' 
b'Privilege Esacalation at Apache Airflow 2.5.1 '

18 May 2023

b'Reddit' disclosed a bug submitted by b'helloitscyberguard' 
b'Rate limit is implemented in Reddit , but its not working . '

18 May 2023

1 ... 58 59 60 61 62 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM