Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Kindred Group' disclosed a bug submitted by b'fransrosen' 
b'Full Account Takeover on *.unibet.com due to crossdomain.xml and AkamaiPlayer loaderContext'

03 Apr 2023

b'Kindred Group' disclosed a bug submitted by b'naaash' 
b'[unibet.com] Delete messages via IDOR at /mom-api/messages/unibet_@unibet/'

03 Apr 2023

b'8x8 Bounty' disclosed a bug submitted by b'bababounty99' 
b'Dangling DNS Record docs.jitsi.net (unsuccessful GSuite takeover)'

03 Apr 2023

b'Expedia Group Bug Bounty' disclosed a bug submitted by b'bombon' 
b'Cache Deception Allows Account Takeover'

01 Apr 2023

b'Expedia Group Bug Bounty' disclosed a bug submitted by b'bombon' 
b'Cache Poisoning Allows Stored XSS Via hav Cookie Parameter (To Account Takeover)'

01 Apr 2023

b'GitHub Security Lab' disclosed a bug submitted by b'gregxsunday' 
b'[ruby]: ZipSlip/TarSlip vulnerability detection'

31 Mar 2023

b'GitHub Security Lab' disclosed a bug submitted by b'maikypedia' 
b'[Ruby]: Server Side Template Injection'

31 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'devokta' 
b'Twitter Account hijack @nextcloudfrance'

30 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'bohwaz' 
b'the complete server installation path is visible in cloud/user endpoint'

30 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'gorei' 
b'Insecure randomness for default password in file sharing when password policy app is disabled'

30 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'rullzer' 
b'Secure view trivial to bypass'

30 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'timon8' 
b'CRLF Injection in Nodejs undici via host'

29 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'mj0nes-vsat' 
b'CVE-2023-23919: Multiple OpenSSL error handling issues in nodejs crypto library'

29 Mar 2023

b'LinkedIn' disclosed a bug submitted by b'tushar6378' 
b'Unauthorized User can View Subscribers of Other Users Newsletters'

29 Mar 2023

b'LINE' disclosed a bug submitted by b'yinmo' 
b'iOS group chat denial of service'

29 Mar 2023

b'ExpressionEngine' disclosed a bug submitted by b'karezma' 
b'PHP Object injection -> Building Custom Gadget chain -> RCE '

28 Mar 2023

b'LINE' disclosed a bug submitted by b'rioncool22' 
b'Stored XSS Via Filename On https://partners.line.me/'

28 Mar 2023

b'LINE' disclosed a bug submitted by b'tosun' 
b'Debugging panel exposure'

28 Mar 2023

b'LINE' disclosed a bug submitted by b'tosun' 
b'Path traversal in a Tomcat server'

28 Mar 2023

b'8x8' disclosed a bug submitted by b'shriyanss' 
b'speedtest.8x8.com: Enabled Directory Listing '

28 Mar 2023

1 ... 90 91 92 93 94 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM