Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Internet Bug Bounty' disclosed a bug submitted by b'sw0rd1ight' 
b'CVE-2023-25692: Apache Airflow Google Provider: Google Cloud Sql Provider Denial Of Service and Remote Command Execution'

16 Apr 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl' 
b'[HTA2] Authorization Bypass on https:// leaks confidential aircraft/missile information'

14 Apr 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xd3adc0de' 
b'Reflected XSS in '

14 Apr 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mdfarhanchowdhuryhasin' 
b'Email exploitation with web hosting services.'

14 Apr 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0r10nh4ck' 
b' WordPress application vulnerable to DoS attack via wp-cron.php'

14 Apr 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0r10nh4ck' 
b'Unauthenticated Blind SSRF at https:// via xmlrpc.php file'

14 Apr 2023

b'Trellix' disclosed a bug submitted by b'ashishmurugan' 
b'Sensitive Information Disclosure'

14 Apr 2023

b'Gener8' disclosed a bug submitted by b'0ct0pu3' 
b'Twitter Broken Link in https://gener8ads.com (Hackerone Profile)'

13 Apr 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'esx' 
b"A malicious actor could rotate tokens of a victim, given that he knows the victim's token ID"

13 Apr 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'ali_hassan_khan' 
b"Cloudflare is not properly deleting user's account"

13 Apr 2023

b'MetaMask' disclosed a bug submitted by b'renniepak' 
b'Possible to spoof Origin in "Connected Sites"'

13 Apr 2023

b'TikTok' disclosed a bug submitted by b'h4x0r_dz' 
b'Unrestricted File Upload on https://partner.tiktokshop.com/wsos_v2/oec_partner/upload'

12 Apr 2023

b'ownCloud' disclosed a bug submitted by b'lukasreschke' 
b'Remote Code Execution on ownCloud instances with ImageMagick installed'

12 Apr 2023

b'ownCloud' disclosed a bug submitted by b'atorralba' 
b'GitHub Security Lab (GHSL) Vulnerability Report: SQLInjection in FileContentProvider.kt (GHSL-2022-059)'

12 Apr 2023

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'Ability to read any emails through IDOR on Nextcloud Mail'

12 Apr 2023

b'HackerOne' disclosed a bug submitted by b'refaat01' 
b'adding h1_analyst_* to username for normal users '

12 Apr 2023

b'Brave Software' disclosed a bug submitted by b'mrzheev' 
b'UXss on brave browser via scan QR Code'

11 Apr 2023

b'Expedia Group Bug Bounty' disclosed a bug submitted by b'exploitmsf' 
b'Sensitive information for phpinfo.php at https://products.ean.com/'

11 Apr 2023

b'LinkedIn' disclosed a bug submitted by b'anandpingsafe' 
b"Can delete other user's post and company page post"

11 Apr 2023

b'Weblate' disclosed a bug submitted by b'triplesided' 
b'Testing flow includes a DeepSource secret'

11 Apr 2023

1 ... 105 106 107 108 109 ... 759

BY DENIS WERNER - @NOBBD - IMPRESSUM