Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Tor' disclosed a bug submitted by b'srkfan' 
b'Report Regarding Security Vulnerability'

28 Nov 2023

b'Tor' disclosed a bug submitted by b'myselfphoton' 
b'Multiple Path Transversal Vulnerabilites'

28 Nov 2023

b'Tor' disclosed a bug submitted by b'yox' 
b'Tor Project - Full Path Disclosure'

28 Nov 2023

b'Tor' disclosed a bug submitted by b'ba4fe4ca95021d367f8a574' 
b'https://get.ooni.torproject.org/'

28 Nov 2023

b'Tor' disclosed a bug submitted by b'nonamehiiden' 
b'Content spoofing on'

28 Nov 2023

b'Mozilla Critical Services' disclosed a bug submitted by b'hackeriron1' 
b'CSRF to Information disclosure on password reset'

27 Nov 2023

b'Kubernetes' disclosed a bug submitted by b'suanve' 
b'Ingress nginx annotation injection causes arbitrary command execution'

24 Nov 2023

b'inDrive' disclosed a bug submitted by b'kristoferent' 
b'Blind SQL injection on id.indrive.com'

24 Nov 2023

b'Liberapay' disclosed a bug submitted by b'0xthem7' 
b'Password Reset Token Leak Via Referrer'

23 Nov 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'w0x42' 
b'[CVE-2023-38546] cookie injection with none file'

23 Nov 2023

b'Glassdoor' disclosed a bug submitted by b'triple_h' 
b"IDOR vulnerability on profile picture changing mechanism which discloses other user's profile picture."

22 Nov 2023

b'HackerOne' disclosed a bug submitted by b'0verw4tch' 
b'Organization members can delete reports in teams they have no access to'

22 Nov 2023

b'Nextcloud' disclosed a bug submitted by b'alacn1' 
b'user_ldap app logs user passwords in the log file on level debug'

21 Nov 2023

b'Nextcloud' disclosed a bug submitted by b'cx75fa' 
b'Delete external storage of any user'

21 Nov 2023

b'Nextcloud' disclosed a bug submitted by b'cx75fa' 
b'HTML injection in search UI when selecting a circle with HTML in the display name'

21 Nov 2023

b'Nextcloud' disclosed a bug submitted by b'nvz' 
b'Enabling Birthday Contact to any user'

21 Nov 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'maskedpersian' 
b'Full account takeover of any user through reset password'

17 Nov 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'r00tdaddy' 
b'XSS in Cisco Endpoint'

17 Nov 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'r00tdaddy' 
b'Unathenticated file read (CVE-2020-3452) '

17 Nov 2023

b'Snowplow' disclosed a bug submitted by b'reefspek' 
b'Unauthorised CocoaPods Auth via Token Leakage & HTTP Header Injection'

16 Nov 2023

1 2 3 4 ... 680

BY DENIS WERNER - @NOBBD - IMPRESSUM