Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Weblate' disclosed a bug submitted by b'tanvir_0x' 
b'No rate limiting for Remove Account lead to huge Mass mailings'

20 Nov 2022

b'MTN Group' disclosed a bug submitted by b'roland_hack' 
b'Reflected XSS in chatbot'

19 Nov 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'angeltsvetkov' 
b'Open Redirect at '

18 Nov 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nightm4re' 
b'IDOR on [HtUS]'

18 Nov 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'x3ph_' 
b'Reflected XSS | https://'

18 Nov 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'x3ph_' 
b'Reflected XSS | https://'

18 Nov 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fklet' 
b'LOGJ4 VUlnerability [HtUS]'

18 Nov 2022

b'Elastic' disclosed a bug submitted by b'newspaper' 
b'Default password on 34.120.209.175'

18 Nov 2022

b'8x8' disclosed a bug submitted by b'shuvam321' 
b'Directory Listing at https://...'

18 Nov 2022

b'ZeroBounce' disclosed a bug submitted by b'devdevirl' 
b'API tokens and Emails leaked lead to sensitive information Disclosure '

17 Nov 2022

b'Elastic' disclosed a bug submitted by b'dee-see' 
b'CSRF in AppSearch allows creation of "curations"'

17 Nov 2022

b'GitHub' disclosed a bug submitted by b'ajxchapman' 
b'[Git Gud] GitHub.com Svnbridge memcached deserialization vulnerability chain leading to Remote Code Execution'

16 Nov 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'joshatmotion' 
b'Ability to bypass locked Cloudflare WARP on wifi networks.'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'RCE via github import'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'CSP-bypass XSS in project settings page'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'XSS: `v-safe-html` is not safe enough'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'cryptopone' 
b'New /add_contacts /remove_contacts quick commands susseptible to XSS from Customer Contact firstname/lastname fields'

16 Nov 2022

b'Acronis' disclosed a bug submitted by b'angeltsvetkov' 
b'Open redirect at mc-beta-cloud-acronis.com'

15 Nov 2022

b'Reddit' disclosed a bug submitted by b'41bin' 
b'Admin can create a hidden admin account which even the owner can not detect and remove and do administrative actions on the application.'

14 Nov 2022

b'Equifax' disclosed a bug submitted by b'valluvarsploit_h1' 
b'Subdomain takeover at http://test.www.midigator.com'

12 Nov 2022

1 ... 94 95 96 97 98 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM