Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bulldawg' 
b'Automatic Admin Access'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bulldawg' 
b'Endpoint Redirects to Admin Page and Provides Admin role'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'tokyoenigma' 
b'Local File Inclusion in download.php'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'maskedpersian' 
b'XML External Entity (XXE) Injection'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01' 
b'Email Takeover leads to permanent account deletion'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01' 
b'Restrict any user from Login to their account'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bulldawg' 
b'Missing Access Control Allows for User Creation and Privilege Escalation '

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Unauthenticated arbitrary file upload on the https:/// (.mil)'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'matrixsoftsec' 
b'Unauthenticated access to internal API at..edu [HtUS]'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'XXE with RCE potential on the https:// (CVE-2017-3548)'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Authentication bypass and potential RCE on the https:// due to exposed Cisco TelePresence SX80 with default credentials'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Unauth IDOR to mass account takeover without user interaction on the (https://.edu/)'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xtrav' 
b'Self XSS'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'[CVE-2018-0296] Cisco VPN path traversal on the https:// ()'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'[CVE-2018-0296] Cisco VPN path traversal on the https:/// (no hostname)'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'[CVE-2018-0296] Cisco VPN path traversal on the https:/// ()'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'[CVE-2018-0296] Cisco VPN path traversal on the https://1 (https://../)'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thpless' 
b'HTML Injection into https://www..mil'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'traveler5260' 
b'CVE-2023-26347 in https://.mil/hax/..CFIDE/adminapi/administrator.cfc?method=getBuildNumber&_cfclient=true'

19 Jul 2024

b'IBM' disclosed a bug submitted by b'redyetihacks' 
b'XSS in IBM InfoCenter'

17 Jul 2024

1 2 3 4 ... 703

BY DENIS WERNER - @NOBBD - IMPRESSUM