Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ruby on Rails' disclosed a bug submitted by b'vairelt' 
b'Escape Sequence Injection vulnerability in Rack'

28 Jun 2023

b'Ruby on Rails' disclosed a bug submitted by b'ghiculescu' 
b'Possible DOS in app with crashing `exceptions_app`'

28 Jun 2023

b'Nextcloud' disclosed a bug submitted by b'bhmth' 
b'User scoped external storage can be used to gather credentials of other users '

27 Jun 2023

b'8x8 Bounty' disclosed a bug submitted by b'exhandler' 
b'connect.8x8.com: Too much resource consumption of the server due to incorrect date range control via /api/v1/reports?dateFrom='

26 Jun 2023

b'Automattic' disclosed a bug submitted by b'riadalrashed' 
b'Stored XSS on wordpress.com'

26 Jun 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2023-28321: IDN wildcard match'

25 Jun 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2023-28322: more POST-after-PUT confusion'

25 Jun 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'wct' 
b'CVE-2023-28319: UAF in SSH sha256 fingerprint check'

25 Jun 2023

b'Nextcloud' disclosed a bug submitted by b'christophwurst' 
b'Contacts only sanitizes PHOTO svg if mime type is all lower case'

24 Jun 2023

b'ownCloud' disclosed a bug submitted by b'rullzer' 
b'Federated share permissions can be increased by recipient'

24 Jun 2023

b'Slack' disclosed a bug submitted by b'salh4ckr' 
b'Ability to join an arbitrary workspace by utilizing a proxy to manipulate invite links'

23 Jun 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xmzm' 
b'External service interaction ( DNS and HTTP ) in www.'

23 Jun 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'samuelsiv' 
b'Docker Registry without authentication leads to docker images download'

23 Jun 2023

b'Mars' disclosed a bug submitted by b'0xs4m' 
b"IDOR ' can delete any animal from other account ' at https://www.miroyalcanin.cl/ "

23 Jun 2023

b'Mars' disclosed a bug submitted by b'0xs4m' 
b"Stored XSS via ' profile ' at https://www.miroyalcanin.cl/"

23 Jun 2023

b'Mars' disclosed a bug submitted by b'ze2paac' 
b'CRLF Inection at `banfieldassets.com`'

23 Jun 2023

b'Mars' disclosed a bug submitted by b'ze2paac' 
b'Information Exposure Through Directory Listing'

23 Jun 2023

b'Mars' disclosed a bug submitted by b'0xs4m' 
b"' Full Account Takeover ' at https://www.miroyalcanin.cl/"

23 Jun 2023

b'Mars' disclosed a bug submitted by b'0xs4m' 
b"IDOR ' can change any account email and cannot retrieve his account and access it ' at https://www.miroyalcanin.cl/"

23 Jun 2023

b'Nextcloud' disclosed a bug submitted by b'nickvergessen' 
b'user_oidc app is missing bruteforce protection'

23 Jun 2023

1 ... 75 76 77 78 79 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM