Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'XSS on internal: privileged origin through reader mode'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'Security token and handler name leak from window.braveBlockRequests'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'Persistent user tracking is possible using window.caches, by avoiding Brave Shields'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'UI spoofing by showing sms:/tel: dialog on another website'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'Brave Shield for iOS is weak against IDN homograph attacks'

22 Jun 2023

b'Brave Software' disclosed a bug submitted by b'nishimunea' 
b'Brave News feeds can open arbitrary chrome: URLs'

22 Jun 2023

b'IBM' disclosed a bug submitted by b'ro0od' 
b'response manipulation leads to bypass in register at employee website than 0 click account takeover'

21 Jun 2023

b'LinkedIn' disclosed a bug submitted by b'headhunter' 
b'See whos interested in working for your company - security issue'

21 Jun 2023

b'Node.js' disclosed a bug submitted by b'yadhukrishnam' 
b'HTTP Request Smuggling via Empty headers separated by CR'

20 Jun 2023

b'JetBlue' disclosed a bug submitted by b'qualw1n' 
b'XSS via Vuln Rendertron Instance At `.jetblue.com/render/*`'

20 Jun 2023

b'HackerOne' disclosed a bug submitted by b'medmahmoudi' 
b"Improper CSRF token validation allows attackers to access victim's accounts linked to Hackerone"

19 Jun 2023

b'Nextcloud' disclosed a bug submitted by b'themarkib0x0' 
b'Error in Booking an appointment reveals the full path of the website'

18 Jun 2023

b'Weblate' disclosed a bug submitted by b'mbi3s' 
b'Logging in without knowing credentials after logged out action'

16 Jun 2023

b'Weblate' disclosed a bug submitted by b'mbi3s' 
b'CSRF with logout action'

16 Jun 2023

b'Rocket.Chat' disclosed a bug submitted by b'ondermedia' 
b'Clickjacking at open.rocket.chat'

15 Jun 2023

b'Snapchat' disclosed a bug submitted by b'happytohelp22' 
b'internal dev tokens disclosure'

14 Jun 2023

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'[CPP]: Add query for CWE-805: Buffer Access with Incorrect Length Value using some functions'

13 Jun 2023

b'GitHub Security Lab' disclosed a bug submitted by b'farid_hunter' 
b'[Python]: Timing attack'

13 Jun 2023

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs' 
b'Go : Add more JWT sinks'

13 Jun 2023

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'CPP: Add query for CWE-369: Divide By Zero.'

13 Jun 2023

1 ... 68 69 70 71 72 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM