Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0x1int' 
b'IDOR leaking PII data via VendorId parameter'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nightm4re' 
b'Account takeover on [HtUS]'

14 Oct 2022

b'Shopify' disclosed a bug submitted by b'hazemhussien99' 
b'Self XSS in https://linkpop.com/dashboard/admin'

13 Oct 2022

b'Shopify' disclosed a bug submitted by b'jmp_35p' 
b'Staff can create workflows in Shopify Admin without apps permission'

13 Oct 2022

b'Shopify' disclosed a bug submitted by b'nagli' 
b'XSS seems to work again after change to linkpop at https://linkpop.com/testnaglinagli'

13 Oct 2022

b'Shopify' disclosed a bug submitted by b'kun_19' 
b'Cross-site scripting on api.collabs.shopify.com'

13 Oct 2022

b'Acronis' disclosed a bug submitted by b'aplis' 
b' mail.acronis.com is vulnerable to zero day vulnerability CVE-2022-41040'

13 Oct 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'paradessia_' 
b'Misconfigured build on websites "abuse.cloudflare.com"'

13 Oct 2022

b'Adobe' disclosed a bug submitted by b'shirshak' 
b'DoS of https://research.adobe.com/ via CVE-2018-6389 exploitation'

13 Oct 2022

b'MTN Group' disclosed a bug submitted by b'insomnia_hax' 
b'IDOR [mtnmobad.mtnbusiness.com.ng]'

13 Oct 2022

b'Yelp' disclosed a bug submitted by b'zero_990' 
b'Autofill/Autosave password on login'

11 Oct 2022

b'TikTok' disclosed a bug submitted by b'codeslayer137' 
b'Stored XSS in the ticketing system'

10 Oct 2022

b'Fastify' disclosed a bug submitted by b'bitk' 
b'Deny of service via malicious Content-Type'

10 Oct 2022

b'Yelp' disclosed a bug submitted by b'ajayjachak' 
b'CORS Misconfiguration on trust.yelp.com'

10 Oct 2022

b'Liberapay' disclosed a bug submitted by b'suprnova' 
b'Email Address Exposure via Gratipay Migration Tool'

09 Oct 2022

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram' 
b'Relative Path Traversal vulnerability in fabric-private-chaincode'

09 Oct 2022

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'Remote Command Execution via Github import'

06 Oct 2022

b'ImpressCMS' disclosed a bug submitted by b'egix' 
b'SQL Injection through /include/findusers.php'

06 Oct 2022

b'Sony' disclosed a bug submitted by b'lu3ky-13' 
b'Path Traversal issue at https:///blaze/'

06 Oct 2022

b'Sony' disclosed a bug submitted by b'n0x496n' 
b'SSRF on http://www./crossdomain.php via url parameter'

06 Oct 2022

1 ... 87 88 89 90 91 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM