Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mars' disclosed a bug submitted by b'themarkib0x0' 
b'Client Side Template Injection to Stored XSS in Image Collection'

14 Feb 2024

b'Mars' disclosed a bug submitted by b'haoshokunoo' 
b'IDOR in one subdomain of -> change information of pets without athorization!'

14 Feb 2024

b'Mars' disclosed a bug submitted by b'stuux' 
b'Blind SQL Injection on via URI Path'

14 Feb 2024

b'Publitas' disclosed a bug submitted by b'azanul' 
b'CVE-2018-6389 exploitation - using scripts loader'

13 Feb 2024

b'Weblate' disclosed a bug submitted by b'aydinyunus' 
b'Information Disclosure'

12 Feb 2024

b'inDrive' disclosed a bug submitted by b'mega9' 
b'Host Header Injection - internal.qa.delivery.indrive.com'

12 Feb 2024

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing' 
b'Subdomain takeover on one of the subdomain under mozgcp.net'

11 Feb 2024

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing' 
b'Subdomain takeover on one of the subdomain under mozaws.net'

11 Feb 2024

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing' 
b'Subdomain takeover on one of the subdomain under mozaws.net'

11 Feb 2024

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing' 
b'Subdomain takeover on one of the subdomain under mozaws.net'

11 Feb 2024

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing' 
b'Subdomain takeover on one of the subdomain under mozaws.net'

11 Feb 2024

b'Mozilla Core Services' disclosed a bug submitted by b'proabiral' 
b'Subdomain takeover on one of the subdomain under mozaws.net'

11 Feb 2024

b'Tennessee Valley Authority' disclosed a bug submitted by b'itssixtynein' 
b'File listing through scripts folder'

09 Feb 2024

b'Shopify' disclosed a bug submitted by b'testingforbugs' 
b'Blind Stored XSS in shopify internal Parquet Viewer'

08 Feb 2024

b'Shopify' disclosed a bug submitted by b'blaklis' 
b'IDOR on GraphQL queries BillingDocumentDownload and BillDetails'

08 Feb 2024

b'Nextcloud' disclosed a bug submitted by b'cyber-tech' 
b'xmlrpc.php &wp-cron.php files are enabled, and will used for (DDOS),(DOS) and broutforce users attack.'

08 Feb 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'mukeran' 
b'Request Smuggling in Apache Tomcat (Important, CVE-2023-45648)'

07 Feb 2024

b'IBM' disclosed a bug submitted by b'ibrahimsyam1' 
b'IBM Maximo Asset Management could allow a remote attacker to bypass authentication due to improper access controls'

06 Feb 2024

b'Reddit' disclosed a bug submitted by b'ahmed-abdo' 
b'Infromation Disclosure To Use of Hard-coded Cryptographic Key'

06 Feb 2024

b'Mars' disclosed a bug submitted by b'dr34m14' 
b'CSRF to delete a pet on '

05 Feb 2024

1 ... 59 60 61 62 63 ... 747

BY DENIS WERNER - @NOBBD - IMPRESSUM