Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Internet Bug Bounty' disclosed a bug submitted by b'hungtd' 
b'Regular Expression Denial of Service (ReDoS) Vulnerability before 2.6.3'

14 Sep 2023

b'HackerOne' disclosed a bug submitted by b'callmed0_4' 
b'Able to see Bonus amount given to a report even if the bounty and Bonus is not visible to public or mentioned in {Report-Id}.json'

14 Sep 2023

b'GitLab' disclosed a bug submitted by b'mrrajputhacker2' 
b'Information Disclosure - Pvt Gitlab Issue Disclosing Through GitLab Unfiltered YouTube channel.'

13 Sep 2023

b'curl' disclosed a bug submitted by b'selmelc' 
b'CVE-2023-38039: HTTP header allocation DOS'

13 Sep 2023

b'Revive Adserver' disclosed a bug submitted by b'l4stb1t' 
b'Multiple cross-site scripting (XSS) vulnerabilities in Revive Adserver'

13 Sep 2023

b'Tor' disclosed a bug submitted by b'andreien' 
b"'Request English versions of web pages for enhanced privacy' keeps previous (grayed out) settings "

13 Sep 2023

b'HackerOne' disclosed a bug submitted by b'0verw4tch' 
b'IDOR: Authorization Bypass in LockReport Mutation for public reports'

13 Sep 2023

b'TikTok' disclosed a bug submitted by b'rioncool22' 
b'Stored XSS Via Ads Account Name'

12 Sep 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'sayoojbkumar' 
b'SSRF Vulnerability through Connection test feature'

12 Sep 2023

b'Radancy' disclosed a bug submitted by b'mouhannadlrx' 
b'Admin account/panel takeOver and Doing actions in admin panel via DOM-based XSS'

12 Sep 2023

b'Mozilla Core Services' disclosed a bug submitted by b'griffinf' 
b'Mozilla Mastodon Staging Instance Admin API Key Disclosure Through Slack'

11 Sep 2023

b'Mozilla Critical Services' disclosed a bug submitted by b'saiteja1231323' 
b'Response Manipulation to enable Account recovery key with out current password'

11 Sep 2023

b'Tennessee Valley Authority' disclosed a bug submitted by b'sailesh01nik' 
b'No Rate Limit On Forgot Password Page'

11 Sep 2023

b'Tennessee Valley Authority' disclosed a bug submitted by b'tvmbug' 
b'xss reflected - pq.tva.com'

11 Sep 2023

b'inDrive' disclosed a bug submitted by b'trustworthy' 
b'the domain is truck-admin.eu-east-1.indriverapp.com and Enter the management system of the blasting mobile phone verification code'

11 Sep 2023

b'Node.js' disclosed a bug submitted by b'rafaelgss' 
b'process.binding() can bypass the permission model through path traversal'

10 Sep 2023

b'Node.js' disclosed a bug submitted by b'rafaelgss' 
b'fs.statfs bypasses Permission Model'

10 Sep 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'leodog896' 
b'Dependency Policy Bypass via process.binding'

09 Sep 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'bean-zhang' 
b"Argocd's web terminal session doesn't expire"

09 Sep 2023

b'Nextcloud' disclosed a bug submitted by b'carl_schwan' 
b'Permissions not respected when copying entire group folders'

09 Sep 2023

1 ... 102 103 104 105 106 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM