Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitLab' disclosed a bug submitted by b'legit-security' 
b'DOS via move_issue'

04 Nov 2022

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'RepositoryPipeline allows importing of local git repos'

04 Nov 2022

b'GitHub' disclosed a bug submitted by b'jupenur' 
b'Command injection in GitHub Actions ContainerStepHost'

03 Nov 2022

b'Automattic' disclosed a bug submitted by b'apapedulimu' 
b'Archived / Deleted / Private Poll Can Be Viewed by Another Users [Crowdsignal WordPress plugins]'

03 Nov 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2022-42916: HSTS bypass via IDN'

03 Nov 2022

b'Automattic' disclosed a bug submitted by b'bugra' 
b'Stored XSS in intensedebate.com via the Comments RSS '

02 Nov 2022

b'Automattic' disclosed a bug submitted by b'bugra' 
b'IDOR in API applications (able to see any API token, leads to account takeover)'

01 Nov 2022

b'Krisp' disclosed a bug submitted by b'n0_m3rcy' 
b'Authentication bypass for leads to take over any users account.'

31 Oct 2022

b'Linktree' disclosed a bug submitted by b'sudi' 
b'XSS in SocialIcon Link'

31 Oct 2022

b'MTN Group' disclosed a bug submitted by b'lu3ky-13' 
b'Cross-Site Request Forgery (CSRF) to xss'

30 Oct 2022

b'MTN Group' disclosed a bug submitted by b'lu3ky-13' 
b'Cross-site Scripting (XSS) - Reflected'

30 Oct 2022

b'Lark Technologies' disclosed a bug submitted by b'snapsec' 
b'Accessing/Editing Folders of Other Users in the Orginisation.'

29 Oct 2022

b'Lark Technologies' disclosed a bug submitted by b'snapsec' 
b'Privilege Escalation to All-staff group'

28 Oct 2022

b'Adobe' disclosed a bug submitted by b'dreamer_eh' 
b'HTML INJECTION FOUND ON https://adobedocs.github.io/analytics-1.4-apis/swagger-docs.html DUE TO OUTDATED SWAGGER UI'

28 Oct 2022

b'Mars' disclosed a bug submitted by b'ramzanrl' 
b'Jolokia Reflected XSS '

27 Oct 2022

b'curl' disclosed a bug submitted by b'kurohiro' 
b'CVE-2022-42916: HSTS bypass via IDN'

27 Oct 2022

b'curl' disclosed a bug submitted by b'kurohiro' 
b'CVE-2022-35260: .netrc parser out-of-bounds access'

27 Oct 2022

b'Gymshark' disclosed a bug submitted by b'a-p0c' 
b"Subdomain takeover on 'de-headless.staging.gymshark.com'"

27 Oct 2022

b'Node.js' disclosed a bug submitted by b'bnoordhuis' 
b'Weak randomness in WebCrypto keygen'

26 Oct 2022

b'Node.js' disclosed a bug submitted by b'vvx7' 
b'HTTP Request Smuggling Due to Incorrect Parsing of Header Fields'

26 Oct 2022

1 ... 96 97 98 99 100 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM