Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sudi' 
b'Local file read at https:/// [HtUS]'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jr0ch17' 
b'[hta3] Chain of ESI Injection & Reflected XSS leading to Account Takeover on []'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jr0ch17' 
b'[HTA2] Receiving access request on @wearehackerone.com email address'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0x1int' 
b'Blind SSRF via image upload URL downloader on https:/// '

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'snifyak' 
b'Account Takeover and Information update due to cross site request forgery via POST /registration/my-account.cfm'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0x1int' 
b'IDOR leaking PII data via VendorId parameter'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nightm4re' 
b'Account takeover on [HtUS]'

14 Oct 2022

b'Shopify' disclosed a bug submitted by b'hazemhussien99' 
b'Self XSS in https://linkpop.com/dashboard/admin'

13 Oct 2022

b'Shopify' disclosed a bug submitted by b'jmp_35p' 
b'Staff can create workflows in Shopify Admin without apps permission'

13 Oct 2022

b'Shopify' disclosed a bug submitted by b'nagli' 
b'XSS seems to work again after change to linkpop at https://linkpop.com/testnaglinagli'

13 Oct 2022

b'Shopify' disclosed a bug submitted by b'kun_19' 
b'Cross-site scripting on api.collabs.shopify.com'

13 Oct 2022

b'Acronis' disclosed a bug submitted by b'aplis' 
b' mail.acronis.com is vulnerable to zero day vulnerability CVE-2022-41040'

13 Oct 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'paradessia_' 
b'Misconfigured build on websites "abuse.cloudflare.com"'

13 Oct 2022

b'Adobe' disclosed a bug submitted by b'shirshak' 
b'DoS of https://research.adobe.com/ via CVE-2018-6389 exploitation'

13 Oct 2022

b'MTN Group' disclosed a bug submitted by b'insomnia_hax' 
b'IDOR [mtnmobad.mtnbusiness.com.ng]'

13 Oct 2022

b'Yelp' disclosed a bug submitted by b'zero_990' 
b'Autofill/Autosave password on login'

11 Oct 2022

b'TikTok' disclosed a bug submitted by b'codeslayer137' 
b'Stored XSS in the ticketing system'

10 Oct 2022

b'Fastify' disclosed a bug submitted by b'bitk' 
b'Deny of service via malicious Content-Type'

10 Oct 2022

b'Yelp' disclosed a bug submitted by b'ajayjachak' 
b'CORS Misconfiguration on trust.yelp.com'

10 Oct 2022

b'Liberapay' disclosed a bug submitted by b'suprnova' 
b'Email Address Exposure via Gratipay Migration Tool'

09 Oct 2022

1 ... 99 100 101 102 103 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM