Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'LINE' disclosed a bug submitted by b'yinmo' 
b'iOS group chat denial of service'

29 Mar 2023

b'ExpressionEngine' disclosed a bug submitted by b'karezma' 
b'PHP Object injection -> Building Custom Gadget chain -> RCE '

28 Mar 2023

b'LINE' disclosed a bug submitted by b'rioncool22' 
b'Stored XSS Via Filename On https://partners.line.me/'

28 Mar 2023

b'LINE' disclosed a bug submitted by b'tosun' 
b'Debugging panel exposure'

28 Mar 2023

b'LINE' disclosed a bug submitted by b'tosun' 
b'Path traversal in a Tomcat server'

28 Mar 2023

b'8x8' disclosed a bug submitted by b'shriyanss' 
b'speedtest.8x8.com: Enabled Directory Listing '

28 Mar 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'boy_child_' 
b'Bypassing creation of API tokens without email verification'

27 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'wonda_tea_coffee' 
b'Open Redirect Vulnerability in Action Pack'

26 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'bncrypted' 
b'Lack of bruteforce protection for TOTP 2FA'

26 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'bncrypted' 
b'Arbitrary read of all SVG files on a Nextcloud server'

26 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'shakierbellows' 
b'Cards in Deck are readable by any user'

26 Mar 2023

b'U.S. Department of State' disclosed a bug submitted by b'qualw1n' 
b'Accessing unauthorized administration pages and seeing admin password - speakerkit.state.gov'

25 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'Chat room member disclosure via autocomplete API'

25 Mar 2023

b'U.S. Department of State' disclosed a bug submitted by b'hollaatm3' 
b'Bypassing Whitelist to perform SSRF for internal host scanning'

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pwnesec' 
b'DoS at (CVE-2018-6389)'

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'miguel_santareno' 
b'Improper Access Control on Media Wiki allows an attackers to restart installation on DoD asset'

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'rodriguezjorgex' 
b'Path traversal leads to reading of local files on and '

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xd3adc0de' 
b'Reflected XSS in '

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'iam_a_jinchuriki' 
b'xmlrpc.php file enabled at .org'

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'abhinavsecondary' 
b'Client side authentication leads to Auth Bypass'

24 Mar 2023

1 ... 66 67 68 69 70 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM