Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nutanix' disclosed a bug submitted by b'tosun' 
b'Limited Disclosure: Employee credentials checked in to github (fixed)'

03 Aug 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'vanhoefm' 
b'Plaintext leakage of DNS requests in Windows 1.1.1.1 WARP client'

03 Aug 2023

b'Brave Software' disclosed a bug submitted by b'world_languages' 
b'Tor IP leak caused by the PDF Viewer extension in certain situations'

02 Aug 2023

b'Ruby' disclosed a bug submitted by b'ooooooo_q' 
b'XMLRPC does not limit deserializable classes.'

01 Aug 2023

b'Valve' disclosed a bug submitted by b'g1a55er' 
b'Steam Deck Single Click Root Remote Code Execution '

01 Aug 2023

b'GitHub' disclosed a bug submitted by b'inspector-ambitious' 
b'Smuggling content in PR with refs/replace in GitHub'

01 Aug 2023

b'Sorare' disclosed a bug submitted by b'fixenet' 
b'Operation CreateOrUpdateSo5LineupMutation does not restrict multiple captains'

01 Aug 2023

b'LinkedIn' disclosed a bug submitted by b'spaceboy20' 
b'bypass two-factor authentication.'

01 Aug 2023

b'RATELIMITED' disclosed a bug submitted by b'codeslayer137' 
b'Apache mod_negotiation filename bruteforcing https://api.ratelimited.me'

01 Aug 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'shewhoisblack' 
b'Crash report -Cloudflare WARP doesn\'t verify text length in "Excluded Host" name input data'

31 Jul 2023

b'HackerOne' disclosed a bug submitted by b'm0chan' 
b'Takeover of hackerone.engineering via Github'

31 Jul 2023

b'HackerOne' disclosed a bug submitted by b'735t' 
b'Register & create a ticket as somebody else on HackerOne Support '

31 Jul 2023

b'Liberapay' disclosed a bug submitted by b'sameersec' 
b'Disavowed an email without any authentication'

31 Jul 2023

b'Ruby on Rails' disclosed a bug submitted by b'thorsteneckel' 
b'Content Security Policy is only active for HTML responses but not for image/svg+xml'

28 Jul 2023

b'Ruby on Rails' disclosed a bug submitted by b'amartinfraguas' 
b'XSS vulnerabilities due to missing checks in tag helpers'

28 Jul 2023

b'Ruby on Rails' disclosed a bug submitted by b'gquadros_' 
b"Argument/Code Injection via ActiveStorage's image transformation functionality"

28 Jul 2023

b'Ruby on Rails' disclosed a bug submitted by b'meowday' 
b'Incorrect handling of certain characters passed to the redirection functionality in Rails can lead to a single-click XSS vulnerability.'

28 Jul 2023

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q' 
b'ReDoS in Rack::Multipart'

28 Jul 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'selmelc' 
b'[curl] CVE-2023-32001: fopen race condition'

27 Jul 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'[CVE-2022-44570] Possible Denial of Service Vulnerability in Racks Range header parsing'

27 Jul 2023

1 ... 75 76 77 78 79 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM