Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Reddit' disclosed a bug submitted by b'dvorakxl' 
b'[accounts.reddit.com] Redirect parameter allows for XSS'

18 May 2023

b'Reddit' disclosed a bug submitted by b'ghbjn' 
b'Huge amount of Subdomains Takeovers at Reddit.com'

18 May 2023

b'Reddit' disclosed a bug submitted by b'testnsh' 
b'No rate limit leads to spaming post'

18 May 2023

b'HackerOne' disclosed a bug submitted by b'alp' 
b'Program managers can see draft reports using Export Reports feature'

18 May 2023

b'curl' disclosed a bug submitted by b'kurohiro' 
b'CVE-2023-28321: IDN wildcard match'

18 May 2023

b'curl' disclosed a bug submitted by b'kurohiro' 
b'CVE-2023-28322: more POST-after-PUT confusion'

18 May 2023

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-28320: siglongjmp race condition'

17 May 2023

b'Nextcloud' disclosed a bug submitted by b'maxime_le-hericy' 
b'Users can set up workflows using restricted and invisible system tags'

17 May 2023

b'LinkedIn' disclosed a bug submitted by b'marvelmaniac' 
b'Anyone can view the results of linkedin skill test -if failed to earn a badge or if the badge earned is kept private: both cases results can be viewed'

17 May 2023

b'Nextcloud' disclosed a bug submitted by b'cryptographer' 
b'No rate limit while adding Additional emails feature'

16 May 2023

b'Ruby' disclosed a bug submitted by b'ooooooo_q' 
b'ReDoS in Time.rfc2822'

16 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nightm4re' 
b'Exposed GIT repo on [HtUS]'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nightm4re' 
b'CSRF to delete accounts [HtUS]'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'colemanj' 
b'XSS in ServiceNow logout https://:443'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl' 
b'[HTA2] XXE on https:// via SpellCheck Endpoint.'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl' 
b'[hta3] Remote Code Execution on '

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xmaruf' 
b'LDAP Server NULL Bind Connection Information Disclosure'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cametome006' 
b'AEM misconfiguration leads to Information disclosure'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0r10nh4ck' 
b'Sensitive Data Exposure via wp-config.php file'

15 May 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'waterlord7788' 
b'Default Credentials on Kinetic Core System Console - https:///kinetic/app/'

15 May 2023

1 ... 84 85 86 87 88 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM