Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Internet Bug Bounty' disclosed a bug submitted by b'bugra' 
b'CVE-2022-45402: Apache Airflow: Open redirect during login'

01 Dec 2022

b'Ian Dunn' disclosed a bug submitted by b'ryotak' 
b'Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commands'

01 Dec 2022

b'LinkedIn' disclosed a bug submitted by b'sachin_kumar_' 
b'Campaign Account Balance and History Disclosed in API Response'

30 Nov 2022

b'Yelp' disclosed a bug submitted by b'shubhangirathore836' 
b"If the website does not impose additional defense against CSRF attacks, failing to use the 'Lax' or 'Strict' values could increase the risk of exposur"

30 Nov 2022

b'TikTok' disclosed a bug submitted by b'aidilarf_2000' 
b'Stored XSS Payload when sending videos '

29 Nov 2022

b'HackerOne' disclosed a bug submitted by b'jobert' 
b"Any organization's assets pending review can be downloaded"

29 Nov 2022

b'Shopify' disclosed a bug submitted by b'kun_19' 
b'Stored XSS in Dovetale by application of creator'

29 Nov 2022

b'AMBER AI' disclosed a bug submitted by b'orange_h' 
b'I found some api keys in js files ,huge leak of token addresses and huge amount of js files are not forbidden '

29 Nov 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'benjaoming_realone' 
b'potential denial of service attack via the locale parameter'

28 Nov 2022

b'MTN Group' disclosed a bug submitted by b'shubham_srt' 
b'Wordpress users Disclosure [ /wp-json/wp/v2/users/ ]'

27 Nov 2022

b'Nextcloud' disclosed a bug submitted by b'kichernde_erbse' 
b'Exception logging in Sharepoint app reveals clear-text connection details'

26 Nov 2022

b'curl' disclosed a bug submitted by b'bagder' 
b'CVE-2022-42915: HTTP proxy double-free'

26 Nov 2022

b'curl' disclosed a bug submitted by b'robbotic' 
b'CVE-2022-32221: POST following PUT confusion'

26 Nov 2022

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen' 
b'Profile of disabled user stays accessible'

26 Nov 2022

b'Nextcloud' disclosed a bug submitted by b'michag86' 
b'Database resource exhaustion for logged-in users via sharee recommendations with circles'

26 Nov 2022

b'Concrete CMS' disclosed a bug submitted by b'adrian_t' 
b'SSRF mitigation bypass using DNS Rebind attack'

25 Nov 2022

b'Concrete CMS' disclosed a bug submitted by b'adrian_t' 
b'open redirect to a remote website which can phish users'

25 Nov 2022

b'Concrete CMS' disclosed a bug submitted by b'adrian_t' 
b'SSRF - pivoting in the private LAN'

25 Nov 2022

b'Nextcloud' disclosed a bug submitted by b'mikeisastar' 
b'XSS in Desktop Client in call notification popup'

25 Nov 2022

b'Nextcloud' disclosed a bug submitted by b'mikeisastar' 
b'XSS in Desktop Client via user status and information'

25 Nov 2022

1 ... 105 106 107 108 109 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM