Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'[CVE-2022-44571] Possible Denial of Service Vulnerability in Rack Content-Disposition parsing'

27 Jul 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'[CVE-2022-44572] Possible Denial of Service Vulnerability in Racks RFC2183 boundary parsing'

27 Jul 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'[CVE-2023-22796] Possible ReDoS based DoS vulnerability in Active Supports underscore'

27 Jul 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'[CVE-2023-22799] Possible ReDoS based DoS vulnerability in GlobalID'

27 Jul 2023

b'People Interactive' disclosed a bug submitted by b'zishanadthandar' 
b'Origin IP found, Cloudflare bypassed'

27 Jul 2023

b'TikTok' disclosed a bug submitted by b'eye_' 
b'CSRF in seller-us.tiktok.com/profile/account-setting/delegation-login '

26 Jul 2023

b'Rockstar Games' disclosed a bug submitted by b'zuhnny1' 
b'XSS on rockstargames.com'

25 Jul 2023

b'curl' disclosed a bug submitted by b'selmelc' 
b'CVE-2023-32001: fopen race condition'

25 Jul 2023

b'EXNESS' disclosed a bug submitted by b'redshark1802' 
b'SSRF in graphQL query (pwapi.ex2b.com)'

24 Jul 2023

b'Nextcloud' disclosed a bug submitted by b'rullzer' 
b'Password reset endpoint is not brute force protected'

21 Jul 2023

b'Node.js' disclosed a bug submitted by b'bensmyth' 
b"DiffieHellman doesn't generate keys after setting a key"

20 Jul 2023

b'Node.js' disclosed a bug submitted by b'm_r_beauchamp' 
b'node.js process aborts when processing x509 certs with invalid public key information'

20 Jul 2023

b'Node.js' disclosed a bug submitted by b'mattaustin' 
b'Process-based permissions can be bypassed with the "inspector" module. '

20 Jul 2023

b'Node.js' disclosed a bug submitted by b'haxatron1' 
b'Filesystem experimental permissions policy does not handle path traversal cases.'

20 Jul 2023

b'Node.js' disclosed a bug submitted by b'cjihrig' 
b'fs.openAsBlob() bypasses permission system'

20 Jul 2023

b'Node.js' disclosed a bug submitted by b'cjihrig' 
b"fs module's file watching is not restricted by --allow-fs-read"

20 Jul 2023

b'Node.js' disclosed a bug submitted by b'haxatron1' 
b'The use of __proto__ in process.mainModule.__proto__.require() bypasses the permission system in Node v19.6.1'

20 Jul 2023

b'LinkedIn' disclosed a bug submitted by b'them4les_l1r' 
b'Ad Account Takeover'

20 Jul 2023

b'Mozilla Core Services' disclosed a bug submitted by b'quikke' 
b'[Hubs] - Broken access control in placing objects in hubs room'

20 Jul 2023

b'Bitwarden' disclosed a bug submitted by b'rink_' 
b'Bypass for forced re-authentication upon biometrics change'

19 Jul 2023

1 ... 76 77 78 79 80 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM