Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'LY Corporation' disclosed a bug submitted by b'never_die' 
b'Client-Side Path Traversal on LINE Developers Console'

26 Sep 2024

b'MTN Group' disclosed a bug submitted by b'renzi' 
b'SSRF Keycloak before 13.0.0 - CVE-2020-10770 on https://sponsoredata.mtn.ci'

26 Sep 2024

b'FetLife' disclosed a bug submitted by b'ezzra' 
b'Able to see location coordinates in any event without permission to do so'

25 Sep 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'Possible DoS Vulnerability with Range Header in Rack'

25 Sep 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'Possible XSS Vulnerability in Action Controller'

25 Sep 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'l33thaxor' 
b'CVE-2024-41989: Denial-Of-Service vulnerability in the floatformat template filter when input string contains a big exponent in scientific notation'

22 Sep 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'z2_' 
b'curl: stack-buffer overread during punycode conversions'

22 Sep 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'manishpatidar' 
b'Unbounded memory growth with session handling in TLSv1.3'

22 Sep 2024

b'TikTok' disclosed a bug submitted by b'sh1yo' 
b'DOM XSS in tiktok.com/login via the redirect_url parameter'

21 Sep 2024

b'Drugs.com' disclosed a bug submitted by b'mathara' 
b'Stored Xss On "https://www.question.com/"'

20 Sep 2024

b'IBM' disclosed a bug submitted by b'mersa-v6' 
b'SSRF and secret key disclosure found on Turbonomic endpoint'

19 Sep 2024

b'IBM' disclosed a bug submitted by b'mersa-v6' 
b'SSRF and secret key disclosure found on Turbonomic endpoint'

19 Sep 2024

b'HackerOne' disclosed a bug submitted by b'raymatp' 
b'inviting collaborator using email disclose the hackerone account related to the user'

19 Sep 2024

b'HackerOne' disclosed a bug submitted by b'callmed0_4' 
b"Issue with VDP Program's Transition to Private Status and Missing Warning Labels on ORG Invitation"

19 Sep 2024

b'HackerOne' disclosed a bug submitted by b'retat4' 
b'Bypass comment restriction'

19 Sep 2024

b'MTN Group' disclosed a bug submitted by b'reachaxis' 
b'IDOR Leads To User Profile Modification https://mtnmobad.mtnbusiness.com.ng/app/updateUser'

18 Sep 2024

b'GitLab' disclosed a bug submitted by b'pwnprincess' 
b'Removed Guest role user who dosent have access to private project in members able to view jobs '

18 Sep 2024

b'Brave Software' disclosed a bug submitted by b'jayateerthag' 
b'Brave Android: Incorrect URL Eliding in Brave Shields Pop Up'

18 Sep 2024

b'GitHub' disclosed a bug submitted by b'inspector-ambitious' 
b'Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in ghe-update-check'

17 Sep 2024

b'GitHub' disclosed a bug submitted by b'inspector-ambitious' 
b"RC Between GitHub's Repo Update REST API and updateTeamsRepository GraphQL Mutation Results in Covert and Persistent Admin Access Retention"

17 Sep 2024

1 ... 6 7 8 9 10 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM