Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mars' disclosed a bug submitted by b'itsmatinx' 
b'Insecure API Response Leads to Disclosure of Hashed Passwords'

26 Nov 2024

b'Mars' disclosed a bug submitted by b'the-white-evil' 
b'Reflected HTML Injection via contact (faq) search parameter on '

25 Nov 2024

b'Mars' disclosed a bug submitted by b'the-white-evil' 
b'Reflected HTML Injection via contact (faq) search parameter on ]='

25 Nov 2024

b'Mars' disclosed a bug submitted by b'abfe' 
b'unsubscribe anyone from all emails @ '

25 Nov 2024

b'Mars' disclosed a bug submitted by b'thpless' 
b'Information Exposure due to enabled debug mode'

25 Nov 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'4xpl0r3r' 
b'`std::process::Command` batch files argument escaping could be bypassed with trailing whitespace or periods'

22 Nov 2024

b'Mars' disclosed a bug submitted by b'blax17' 
b'phpinfo() exposed on '

21 Nov 2024

b'Mars' disclosed a bug submitted by b'thpless' 
b'phpinfo() exposed on '

21 Nov 2024

b'Mars' disclosed a bug submitted by b'cholo_' 
b'Upload profile photo and Pets addition - IDOR'

21 Nov 2024

b'Mars' disclosed a bug submitted by b'mo_salah12' 
b'RXSS on via q parameter'

21 Nov 2024

b'Nextcloud' disclosed a bug submitted by b'tuyenee' 
b'External storage - global credentials returned to the client side in plaintext'

21 Nov 2024

b'Acronis' disclosed a bug submitted by b'mr-medi' 
b'DOM Based Cookie Bomb in *.acronis.com via x-clickref GET Parameter'

21 Nov 2024

b'Mozilla' disclosed a bug submitted by b'bashbdeer' 
b'csrftoken not unique to session or specific user and csrfmiddlewaretoken can be altered'

20 Nov 2024

b'Acronis' disclosed a bug submitted by b'tomblorg' 
b'Reflected XSS in https://www.acronis.com/products/cyber-protect/trial/'

20 Nov 2024

b'Planet Labs' disclosed a bug submitted by b'y0usef' 
b'Api data leak'

20 Nov 2024

b'Mars' disclosed a bug submitted by b'mo_salah12' 
b'RXSS in via S parameter '

19 Nov 2024

b'Mars' disclosed a bug submitted by b'mo_salah12' 
b'sensitive data-creds for database - private key'

19 Nov 2024

b'Mars' disclosed a bug submitted by b'mo_salah12' 
b'CSRF in Delete Pet Function'

19 Nov 2024

b'Mars' disclosed a bug submitted by b'e5p3ctr0x96' 
b'Reflected XSS on formaction parameter'

19 Nov 2024

b'AWS VDP' disclosed a bug submitted by b'zolaer9527' 
b'A potential risk in the cloudFrontExtensionsConsole which can be used to privilege escalation.'

19 Nov 2024

1 ... 8 9 10 11 12 ... 724

BY DENIS WERNER - @NOBBD - IMPRESSUM