Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'LinkedIn' disclosed a bug submitted by b'qualw1n' 
b'Information disclosure by sending a GIF'

28 Apr 2023

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen' 
b'Desktop client does not verify received singed certificate in end to end encryption'

27 Apr 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'das7pad' 
b'Possible DoS Vulnerability in Multipart MIME parsing in rack'

27 Apr 2023

b'Hyperledger' disclosed a bug submitted by b'kmhlyxj0' 
b'[indy_node]POOL_UPGRADE command injection, Trustee Node can execute command in any other Node`s system.'

27 Apr 2023

b'8x8' disclosed a bug submitted by b'pentestor' 
b'Credential leak on GitHub: https://github.com/// (Peoplesoft CRM)'

27 Apr 2023

b'U.S. Department of State' disclosed a bug submitted by b'devdevrl' 
b'HTML INJECTION on coins.state.gov'

26 Apr 2023

b'Brave Software' disclosed a bug submitted by b'j3rry-1729' 
b'S3 Bucket Takeover "brave-browser-rpm-staging-release-test"'

26 Apr 2023

b'Brave Software' disclosed a bug submitted by b'j3rry-1729' 
b'S3 Bucket Takeover : brave-apt'

26 Apr 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'dee-see' 
b'CVE-2023-28755: ReDoS vulnerability in URI'

26 Apr 2023

b'Reddit' disclosed a bug submitted by b'revolte' 
b'Blind SSRF with Escalation possibilities in matrix preview_link API'

26 Apr 2023

b'Omise' disclosed a bug submitted by b'muhammadilyas' 
b"The endpoint '/test/webhooks' is vulnerable to DNS Rebinding"

26 Apr 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'ReDoS( Ruby, Time)'

26 Apr 2023

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Retrospective change of message timestamp and order'

25 Apr 2023

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Messages can be hidden regardless of server configuration'

25 Apr 2023

b'Rocket.Chat' disclosed a bug submitted by b'priyank_parmar' 
b'Improper Access Control - Generic'

25 Apr 2023

b'Kubernetes' disclosed a bug submitted by b'jlleitschuh' 
b'The `io.kubernetes.client.util.generic.dynamic.Dynamics` contains a code execution vulnerability due to SnakeYAML'

25 Apr 2023

b'Kubernetes' disclosed a bug submitted by b'stealthy' 
b'File Read Vulnerability allows Attackers to Compromise S3 buckets using Prow'

25 Apr 2023

b'Nextcloud' disclosed a bug submitted by b'hackit_bharat' 
b'Missing brute force protection for passwords of password protected share links'

25 Apr 2023

b'Acronis' disclosed a bug submitted by b'imranhudaa' 
b"Delete any user's added Email,Telephone,Fax,Address,Skype via csrf in (https://academy.acronis.com/)"

25 Apr 2023

b'Sony' disclosed a bug submitted by b'kauenavarro' 
b'SQL Injection at https:// via parameter'

24 Apr 2023

1 ... 62 63 64 65 66 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM