Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Rocket.Chat' disclosed a bug submitted by b'fabianfreyer' 
b'Server-side RCE through directory traversal-based arbitrary file write'

10 Jul 2023

b'8x8' disclosed a bug submitted by b'ssharmaz' 
b'xss(r) vcc-na11.8x8.com'

10 Jul 2023

b'Ruby on Rails' disclosed a bug submitted by b'haqpl' 
b'ActionView sanitize helper bypass leading to XSS using SVG tag.'

10 Jul 2023

b'SHEIN' disclosed a bug submitted by b'x1337loser' 
b'RCE via npm misconfig -- installing internal libraries from the public registry'

08 Jul 2023

b'MetaMask' disclosed a bug submitted by b'hackerontwowheels' 
b'Arbitrary file write triggered by deeplink abuse - MetaMask Android'

07 Jul 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'mega7' 
b'Basic XSS [WAF Bypasses]'

07 Jul 2023

b'HackerOne' disclosed a bug submitted by b'light3r' 
b'Banned user still able to invited to reports as a collabrator and reset the password'

06 Jul 2023

b'Rockstar Games' disclosed a bug submitted by b'0xshivam' 
b'Improper Authentication inside the Rockstar Games Launcher which leads to Account takeover to some extend'

05 Jul 2023

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'Internal machine learning API endpoint for CWE classification is vulnerable to path traversal'

05 Jul 2023

b'inDrive' disclosed a bug submitted by b'mikejohnson_1' 
b'inDriver Job - Admin Approval Bypass'

05 Jul 2023

b'Newegg' disclosed a bug submitted by b'team_tsk' 
b'Endpoint disclosing user password'

05 Jul 2023

b'MetaMask' disclosed a bug submitted by b'renekroka' 
b'MetaMask Browser URL and Transaction Origin Spoofing - Metamask wallet Android & Metamask wallet iOS'

04 Jul 2023

b'HackerOne' disclosed a bug submitted by b'0xrayan1996' 
b'An attacker can can view any hacker email via /SaveCollaboratorsMutation operation name '

04 Jul 2023

b'Python Cryptographic Authority' disclosed a bug submitted by b'skin' 
b'Error Page Content Spoofing or Text Injection'

03 Jul 2023

b'Stripe' disclosed a bug submitted by b'peterldowns' 
b"The `stripe/veneur` GitHub repository links to a domain `veneur.org`, which is not under stripe's control"

03 Jul 2023

b'WordPress' disclosed a bug submitted by b'zoczus' 
b'wp-embed XSS on Safari'

01 Jul 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'codeslayer137' 
b'Blind Sql Injection https:/'

30 Jun 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'bensmyth' 
b"DiffieHellman doesn't generate keys after setting a key"

30 Jun 2023

b'inDrive' disclosed a bug submitted by b'bogdantcaciuc' 
b'Full access to InDrive jira panel via exposed API token '

28 Jun 2023

b'inDrive' disclosed a bug submitted by b'spongebhav' 
b"Rider can forcefully get passenger's order accepted resulting in multiple impacts including PII reveal and more mentioned in the report."

28 Jun 2023

1 ... 74 75 76 77 78 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM