Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'supr4s' 
b'Mail app - blind SSRF via smtpHost parameter'

06 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'supr4s' 
b'Mail app - Blind SSRF via Sierve server fonctionnality and sieveHost parameter'

06 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'supr4s' 
b'Mail app - blind SSRF via imapHost parameter'

06 Feb 2023

b'JetBlue' disclosed a bug submitted by b'doosec101' 
b'Open Redirection'

05 Feb 2023

b'JetBlue' disclosed a bug submitted by b'doosec101' 
b'Access to tomcat-manager with default creds'

05 Feb 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2022-43551: Another HSTS bypass via IDN'

03 Feb 2023

b'Sorare' disclosed a bug submitted by b'gokulsk' 
b'Mystery with a leaked token and Reusability of email confirmation link leading to Account Takeover'

03 Feb 2023

b'TikTok' disclosed a bug submitted by b'amans' 
b'TikTok 2FA Bypass'

03 Feb 2023

b'Shopify' disclosed a bug submitted by b'kannthu' 
b'XSS at jamfpro.shopifycloud.com'

02 Feb 2023

b'Judge.me ' disclosed a bug submitted by b'penguinshelp' 
b'Self-XSS due to image URL can be eploited via XSSJacking techniques in review email'

01 Feb 2023

b'Judge.me ' disclosed a bug submitted by b'criptex' 
b'HTML INJECTION (STORED)'

01 Feb 2023

b'Judge.me ' disclosed a bug submitted by b'penguinshelp' 
b'Improper Access Control in Ali Express Importer'

01 Feb 2023

b'Judge.me ' disclosed a bug submitted by b'vj1naruto' 
b'Stored XSS in Public Profile Reviews'

01 Feb 2023

b'Shopify' disclosed a bug submitted by b'irisrumtub' 
b'Stored XSS in SVG file as data: url'

31 Jan 2023

b'JetBlue' disclosed a bug submitted by b'mmdz' 
b'Open Redirect at blueonboardingqa1.jetblue.com'

29 Jan 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'haqpl' 
b'Rails ActionView sanitize helper bypass leading to XSS using SVG tag.'

29 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'theinternetofdefcon_' 
b'[U.S. Air Force] Information disclosure due unauthenticated access to APIs and system browser functions'

27 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alishah' 
b'Reflected XSS on .mil'

27 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'maskedpersian' 
b'reflected xss in www..gov'

27 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'notajax' 
b'XSS on ( .gov ) Via URL path'

27 Jan 2023

1 ... 85 86 87 88 89 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM