Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'bhmth' 
b'User scoped external storage can be used to gather credentials of other users '

27 Jun 2023

b'8x8 Bounty' disclosed a bug submitted by b'exhandler' 
b'connect.8x8.com: Too much resource consumption of the server due to incorrect date range control via /api/v1/reports?dateFrom='

26 Jun 2023

b'Automattic' disclosed a bug submitted by b'riadalrashed' 
b'Stored XSS on wordpress.com'

26 Jun 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2023-28321: IDN wildcard match'

25 Jun 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2023-28322: more POST-after-PUT confusion'

25 Jun 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'wct' 
b'CVE-2023-28319: UAF in SSH sha256 fingerprint check'

25 Jun 2023

b'Nextcloud' disclosed a bug submitted by b'christophwurst' 
b'Contacts only sanitizes PHOTO svg if mime type is all lower case'

24 Jun 2023

b'ownCloud' disclosed a bug submitted by b'rullzer' 
b'Federated share permissions can be increased by recipient'

24 Jun 2023

b'Slack' disclosed a bug submitted by b'salh4ckr' 
b'Ability to join an arbitrary workspace by utilizing a proxy to manipulate invite links'

23 Jun 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xmzm' 
b'External service interaction ( DNS and HTTP ) in www.'

23 Jun 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'samuelsiv' 
b'Docker Registry without authentication leads to docker images download'

23 Jun 2023

b'Mars' disclosed a bug submitted by b'0xs4m' 
b"IDOR ' can delete any animal from other account ' at https://www.miroyalcanin.cl/ "

23 Jun 2023

b'Mars' disclosed a bug submitted by b'0xs4m' 
b"Stored XSS via ' profile ' at https://www.miroyalcanin.cl/"

23 Jun 2023

b'Mars' disclosed a bug submitted by b'ze2paac' 
b'CRLF Inection at `banfieldassets.com`'

23 Jun 2023

b'Mars' disclosed a bug submitted by b'ze2paac' 
b'Information Exposure Through Directory Listing'

23 Jun 2023

b'Mars' disclosed a bug submitted by b'0xs4m' 
b"' Full Account Takeover ' at https://www.miroyalcanin.cl/"

23 Jun 2023

b'Mars' disclosed a bug submitted by b'0xs4m' 
b"IDOR ' can change any account email and cannot retrieve his account and access it ' at https://www.miroyalcanin.cl/"

23 Jun 2023

b'Nextcloud' disclosed a bug submitted by b'nickvergessen' 
b'user_oidc app is missing bruteforce protection'

23 Jun 2023

b'TikTok' disclosed a bug submitted by b'rektile404' 
b'Improper user validation on mentions and hashtags'

22 Jun 2023

b'Rocket.Chat' disclosed a bug submitted by b'sachinrajput' 
b'Reflected Cross-Site Scripting(CVE-2022-32770 )'

22 Jun 2023

1 ... 61 62 63 64 65 ... 724

BY DENIS WERNER - @NOBBD - IMPRESSUM