Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'cryptographer' 
b'No rate limit while adding Additional emails feature'

16 May 2023

b'Ruby' disclosed a bug submitted by b'ooooooo_q' 
b'ReDoS in Time.rfc2822'

16 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nightm4re' 
b'Exposed GIT repo on [HtUS]'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nightm4re' 
b'CSRF to delete accounts [HtUS]'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'colemanj' 
b'XSS in ServiceNow logout https://:443'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl' 
b'[HTA2] XXE on https:// via SpellCheck Endpoint.'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl' 
b'[hta3] Remote Code Execution on '

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xmaruf' 
b'LDAP Server NULL Bind Connection Information Disclosure'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cametome006' 
b'AEM misconfiguration leads to Information disclosure'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0r10nh4ck' 
b'Sensitive Data Exposure via wp-config.php file'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'waterlord7788' 
b'Default Credentials on Kinetic Core System Console - https:///kinetic/app/'

15 May 2023

b'8x8 Bounty' disclosed a bug submitted by b'yassinek3ch' 
b'connect.8x8.com: Blind SSRF via /api/v2/chats/image-check allows for Internal Ports scan'

15 May 2023

b'LinkedIn' disclosed a bug submitted by b'find_me_here' 
b"[ Continuation Report from #1814842 ] Can create articles using other users' NewsLetters"

15 May 2023

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'Reflected XSS vulnerability with full CSP bypass in Nextcloud installations using recommended bundle'

15 May 2023

b'GlassWire' disclosed a bug submitted by b'chip_sec' 
b'Facebook App API credentials leaked in the APK'

12 May 2023

b'WordPress' disclosed a bug submitted by b'chip_sec' 
b'PII of users can be downloaded from export pages'

12 May 2023

b'HackerOne' disclosed a bug submitted by b'iamr0000t' 
b'HTML injection in email at https://www.hackerone.com/'

12 May 2023

b'LinkedIn' disclosed a bug submitted by b'spaceboy20' 
b"Attacker can unpin posts from companies he's not part of."

12 May 2023

b'LinkedIn' disclosed a bug submitted by b'find_me_here' 
b'Attackers do not need to Pay for a Subscription to get the `Discussion Group URL` in `Paid Learning`'

12 May 2023

b'LinkedIn' disclosed a bug submitted by b'encodedguy' 
b'Delete any LinkedIn comment on learning API of other users'

12 May 2023

1 ... 72 73 74 75 76 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM