Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Doppler' disclosed a bug submitted by b'clubbable' 
b'WAF bypass and java script incomplete handling of Unicode characters might leads to dom-xss'

13 Jan 2025

b'Trellix' disclosed a bug submitted by b'r4v' 
b'Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10'

12 Jan 2025

b'MTN Group' disclosed a bug submitted by b'tinopreter' 
b'Yet Another OTP code Leaked in the API Response'

08 Jan 2025

b'MTN Group' disclosed a bug submitted by b'tinopreter' 
b'SQL injection in URL path leads to Database Access'

08 Jan 2025

b'MTN Group' disclosed a bug submitted by b'tinopreter' 
b'OTP code Leaked in API Response '

08 Jan 2025

b'Mozilla' disclosed a bug submitted by b'jabiyev' 
b'Denial of Access to Static Resources via Cache Poisoning on addons.allizom.org'

08 Jan 2025

b'Mozilla' disclosed a bug submitted by b'dotxml' 
b'Bypass Email Verification on Add Email Monitoring'

07 Jan 2025

b'Internet Bug Bounty' disclosed a bug submitted by b'saurabhb' 
b'Apache Airflow: Sensitive Information Exposure in DAG Run Logs'

30 Dec 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'saurabhb' 
b'Secrets not masked in UI when sensitive variables are set via Airflow cli'

30 Dec 2024

b'Truecaller ' disclosed a bug submitted by b'marcotuliocnd' 
b'Lack of URL Validation in avatarUrl at /v4/profile'

28 Dec 2024

b'Acronis' disclosed a bug submitted by b'darkdream' 
b'[oem.acronis.com] Reflected Cross Site Scripting '

28 Dec 2024

b'AWS VDP' disclosed a bug submitted by b'zolaer9527' 
b'A potential risk in the aws-lambda-ecs-run-task which can be used to privilege escalation.'

27 Dec 2024

b'curl' disclosed a bug submitted by b'scottarterbury' 
b'Hackers Attack Curl Vulnerability Accessing Sensitive Information'

27 Dec 2024

b'MTN Group' disclosed a bug submitted by b'nhx1' 
b'DOM Based Reflected Cross Site Scripting'

25 Dec 2024

b'MTN Group' disclosed a bug submitted by b'nhx1' 
b'Information disclosure via enabled Django Debug Mode '

25 Dec 2024

b'MTN Group' disclosed a bug submitted by b'nhx1' 
b'Improper Access Control leaks OTPs sent to all phone numbers'

25 Dec 2024

b'AWS VDP' disclosed a bug submitted by b'perigou' 
b'Reflected XSS on Amazon EC2 Instance'

24 Dec 2024

b'AWS VDP' disclosed a bug submitted by b'perigou' 
b'CVE-2020-5902 '

24 Dec 2024

b'HackerOne' disclosed a bug submitted by b'sarthakbhingare015' 
b'Access to limited confidential information of private program as a Ex-reporter, Report Participant(external user) & Ex-staff member'

24 Dec 2024

b'Basecamp' disclosed a bug submitted by b'mrm0nk' 
b'Bypass "Upgrade To Add Project" Restriction in Free Account To Create Multiple Projects Without Upgrading '

20 Dec 2024

1 ... 5 6 7 8 9 ... 724

BY DENIS WERNER - @NOBBD - IMPRESSUM