Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'maskedpersian' 
b'stored cross site scripting in https://'

06 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'maskedpersian' 
b'stored cross site scripting in https://'

06 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'w13d0m' 
b'Sql Injection At '

06 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'demon1c' 
b'Local File Read vulnerability on [HtUS]'

06 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'norwegianwood' 
b'[] Remote Code Execution at [CVE-2021-44529] [HtUS]'

06 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'haxor31337' 
b'SQL Injection at https://.asp () [selMajcom] [HtUS]'

06 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pwn33d' 
b'CSRF to ATO at https:///user/account [HtUS]'

06 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0x53_0x52_0x59' 
b'xss on reset password page'

06 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'chef_shell' 
b'XSS via Client Side Template Injection on www./News/Speeches'

06 Jan 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'leixiao' 
b'CVE-2022-40127: RCE in Apache Airflow <2.4.0 bash example'

05 Jan 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'0b5cur17y' 
b' CVE-2022-23520: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)'

04 Jan 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'0b5cur17y' 
b'CVE-2022-23519: Rails::Html::SafeListSanitizer vulnerable to XSS when certain tags are allowed (math+style || svg+style)'

04 Jan 2023

b'Consensys' disclosed a bug submitted by b'doosec101' 
b'CSV Injection at https://assets-paris-demo.codefi.network/'

04 Jan 2023

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q' 
b'ReDoS (Rails::Html::PermitScrubber.scrub_attribute)'

02 Jan 2023

b'Tor' disclosed a bug submitted by b'soulhunter' 
b'Address Bar Spoofing on TOR Browser'

02 Jan 2023

b'Nextcloud' disclosed a bug submitted by b'daniel_calvino_sanchez' 
b'Guests can continue to receive video streams from call after being removed from a conversation'

31 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'hackeronefour' 
b'No password length limit when creating a user as an administrator'

31 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'juliushaertl' 
b'Disabled download shares still allow download through preview images'

31 Dec 2022

b'JetBlue' disclosed a bug submitted by b'dracoludio' 
b'Dom-Based XSS on parameter ?vsid='

30 Dec 2022

b'Twitter' disclosed a bug submitted by b'jub0bs' 
b"Chained open redirects and use of Ideographic Full Stop defeat Twitter's approach to blocking links"

29 Dec 2022

1 ... 76 77 78 79 80 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM