Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitHub' disclosed a bug submitted by b'ali_shehab' 
b'Managing Pages '

22 Dec 2022

b'Stripe' disclosed a bug submitted by b'akashhamal0x01' 
b'Mass account takeover!'

21 Dec 2022

b'Quantopian' disclosed a bug submitted by b'irisrumtub' 
b'Stored cross-site scripting in dataset owner.'

21 Dec 2022

b'Quantopian' disclosed a bug submitted by b'irisrumtub' 
b'Ability to perform various POST requests on quantopian.com as a different user - insecure by design.'

21 Dec 2022

b'Quantopian' disclosed a bug submitted by b'irisrumtub' 
b'Cross-site scripting via hardcoded front-end watched expression.'

21 Dec 2022

b'Quantopian' disclosed a bug submitted by b'irisrumtub' 
b'Cross-site scripting on algorithm collaborator '

21 Dec 2022

b'Urban Company' disclosed a bug submitted by b'musashi42' 
b'Host header injection that bypassed protection and allowed accessing multiple subdomains'

21 Dec 2022

b'curl' disclosed a bug submitted by b'kurohiro' 
b'CVE-2022-43551: Another HSTS bypass via IDN'

21 Dec 2022

b'Stripe' disclosed a bug submitted by b'mr_asg' 
b'Unauthorized Canceling/Unsubscribe TaxJar account & Payment information DIsclosure'

20 Dec 2022

b'Stripe' disclosed a bug submitted by b'mr_asg' 
b'[Broken Access Control ] Unauthorized Linking accounts & Linked Accounts info DIsclosure'

20 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'errorx404' 
b'Missing length validation of user displayname allows to generate an SQL error'

20 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'lauritz' 
b'[user_oidc] Stored XSS via Authorization Endpoint - Safari-Only'

18 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'lauritz' 
b'[user_oidc] Unencrypted Communications'

18 Dec 2022

b'Khan Academy' disclosed a bug submitted by b'shuvam321' 
b'Email Verification Bypass Allows Users to Add & verify Any Email As Guardians Email '

17 Dec 2022

b'Sony' disclosed a bug submitted by b'n0x496n' 
b'LFI at http://www.'

16 Dec 2022

b'Consensys' disclosed a bug submitted by b'krrish_hackk' 
b'Sub-Domain Takeover at http://www.codefi.consensys.net/'

16 Dec 2022

b'Automattic' disclosed a bug submitted by b'aaroncarson' 
b'Akismet API keys are exposed by authentication method'

16 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'0x3bdo' 
b'Exposed Log File Lead to Full Internal path disclosure at [https://nextcloud.com/wp-content/debug.log] '

15 Dec 2022

b'MTN Group' disclosed a bug submitted by b'jimmisimon' 
b'Firebase credentials leak'

15 Dec 2022

b'Nintendo' disclosed a bug submitted by b'rambo6glaz' 
b'[MK8DX] Improper verification of Competition creation allows to create "Official" competitions'

15 Dec 2022

1 ... 90 91 92 93 94 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM