Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Judge.me ' disclosed a bug submitted by b'vj1naruto' 
b'Stored XSS in Public Profile Reviews'

01 Feb 2023

b'Shopify' disclosed a bug submitted by b'irisrumtub' 
b'Stored XSS in SVG file as data: url'

31 Jan 2023

b'JetBlue' disclosed a bug submitted by b'mmdz' 
b'Open Redirect at blueonboardingqa1.jetblue.com'

29 Jan 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'haqpl' 
b'Rails ActionView sanitize helper bypass leading to XSS using SVG tag.'

29 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'theinternetofdefcon_' 
b'[U.S. Air Force] Information disclosure due unauthenticated access to APIs and system browser functions'

27 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alishah' 
b'Reflected XSS on .mil'

27 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'maskedpersian' 
b'reflected xss in www..gov'

27 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'notajax' 
b'XSS on ( .gov ) Via URL path'

27 Jan 2023

b'TikTok' disclosed a bug submitted by b'mrhavit' 
b'IDOR for changing privacy settings on any memories'

27 Jan 2023

b'TikTok' disclosed a bug submitted by b's3c' 
b'XSS at TikTok Ads Endpoint'

27 Jan 2023

b'EXNESS' disclosed a bug submitted by b'siddharthamx' 
b'Verification process done using different documents without corresponding to user information / User information can be changed after verification'

27 Jan 2023

b'8x8' disclosed a bug submitted by b'xdopa' 
b'wavecell.com: Broken Link Hijacking / Instagram Takeover @'

27 Jan 2023

b'TikTok' disclosed a bug submitted by b'mrhavit' 
b'Any user can vote on `Friend Only` video pull'

27 Jan 2023

b'GitHub' disclosed a bug submitted by b'ahacker1' 
b"Github Apps can use Scoped-User-To-Server Tokens to Obtain Full Access to User's Projects in Project V2 GraphQL api"

26 Jan 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'albertspedersen' 
b'Using special IPv4-mapped IPv6 addresses to bypass local IP ban'

24 Jan 2023

b'Linktree' disclosed a bug submitted by b'0xshdax' 
b'[song.link] Open Redirect'

23 Jan 2023

b'Slack' disclosed a bug submitted by b'pisarenko' 
b'XSS on link and window.opener '

23 Jan 2023

b'LocalTapiola' disclosed a bug submitted by b'voiddy' 
b'Cookie exfiltration through XSS on the main search request of www.lahitapiola.fi'

19 Jan 2023

b'Yelp' disclosed a bug submitted by b'rac_fckscty' 
b'PURGE is not authenticated'

19 Jan 2023

b'KAYAK' disclosed a bug submitted by b'retr02332' 
b'1 click Account takeover via deeplink in [com.kayak.android]'

19 Jan 2023

1 ... 98 99 100 101 102 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM