Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pwn33d' 
b'CSRF to ATO at https:///user/account [HtUS]'

06 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0x53_0x52_0x59' 
b'xss on reset password page'

06 Jan 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'chef_shell' 
b'XSS via Client Side Template Injection on www./News/Speeches'

06 Jan 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'leixiao' 
b'CVE-2022-40127: RCE in Apache Airflow <2.4.0 bash example'

05 Jan 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'0b5cur17y' 
b' CVE-2022-23520: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)'

04 Jan 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'0b5cur17y' 
b'CVE-2022-23519: Rails::Html::SafeListSanitizer vulnerable to XSS when certain tags are allowed (math+style || svg+style)'

04 Jan 2023

b'Consensys' disclosed a bug submitted by b'doosec101' 
b'CSV Injection at https://assets-paris-demo.codefi.network/'

04 Jan 2023

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q' 
b'ReDoS (Rails::Html::PermitScrubber.scrub_attribute)'

02 Jan 2023

b'Tor' disclosed a bug submitted by b'soulhunter' 
b'Address Bar Spoofing on TOR Browser'

02 Jan 2023

b'Nextcloud' disclosed a bug submitted by b'daniel_calvino_sanchez' 
b'Guests can continue to receive video streams from call after being removed from a conversation'

31 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'hackeronefour' 
b'No password length limit when creating a user as an administrator'

31 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'juliushaertl' 
b'Disabled download shares still allow download through preview images'

31 Dec 2022

b'JetBlue' disclosed a bug submitted by b'dracoludio' 
b'Dom-Based XSS on parameter ?vsid='

30 Dec 2022

b'Twitter' disclosed a bug submitted by b'jub0bs' 
b"Chained open redirects and use of Ideographic Full Stop defeat Twitter's approach to blocking links"

29 Dec 2022

b'Khan Academy' disclosed a bug submitted by b'fdeleite' 
b'S3 bucket takeover [learn2.khanacademy.org]'

29 Dec 2022

b'MTN Group' disclosed a bug submitted by b'thewikiii' 
b'Wordpress users Disclosure [ /wp-json/wp/v2/users/ ] Not Resolved () '

28 Dec 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'jrs53' 
b'Leak of sensitive values to Airflow rendered template'

27 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'spaceraccoon' 
b'SMTP Command Injection in Appointment Emails via Newlines'

27 Dec 2022

b'curl' disclosed a bug submitted by b'bagder' 
b'CVE-2022-43552: HTTP Proxy deny use-after-free'

26 Dec 2022

b'Linktree' disclosed a bug submitted by b'twelvesix' 
b'Account takeover - improper validation of jwt signature (with regards to experiation date claim)'

26 Dec 2022

1 ... 101 102 103 104 105 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM