Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'Ability to escape database transaction through SQL injection, leading to arbitrary code execution'

09 Aug 2022

b'Top Echelon Software' disclosed a bug submitted by b'anonymmert12' 
b'xmlrpc.php FILE IS enable it will used for Bruteforce attack and Denial of Service(DoS)'

08 Aug 2022

b'Nextcloud' disclosed a bug submitted by b'error2001' 
b'Lack of Rate limit while joining video call in talk section which is password protected'

08 Aug 2022

b'RATELIMITED' disclosed a bug submitted by b'codeslayer137' 
b'HTTP PUT method is enabled downloader.ratelimited.me'

07 Aug 2022

b'Omise' disclosed a bug submitted by b'codeslayer137' 
b'Anonymous access control - Payments Status'

07 Aug 2022

b'Hyperledger' disclosed a bug submitted by b'freskimo' 
b'RCE vulnerability in Hyperledger Fabric SDK for Java'

06 Aug 2022

b'Hyperledger' disclosed a bug submitted by b'mttrbrts' 
b'Enrolling to a CA that returns an empty response crashes the node process'

06 Aug 2022

b'Hyperledger' disclosed a bug submitted by b'xiaoc' 
b'Brute Force of fabric-ca server admin account'

06 Aug 2022

b'MTN Group' disclosed a bug submitted by b'alimanshester' 
b'cross site scripting in : mtn.bj'

06 Aug 2022

b'Kubernetes' disclosed a bug submitted by b'gaffy' 
b'Ingress-nginx path allows retrieval of ingress-nginx serviceaccount token'

06 Aug 2022

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram' 
b'Fix : (Security) Mitigate Path Traversal Bug'

05 Aug 2022

b'Reddit' disclosed a bug submitted by b'high_ping_ninja' 
b'Getting access of mod logs from any public or restricted subreddit with IDOR vulnerability'

04 Aug 2022

b'Automattic' disclosed a bug submitted by b'ghimire_veshraj' 
b'Unauthenticated Private Messages DIsclosure via wordpress Rest API'

04 Aug 2022

b'Automattic' disclosed a bug submitted by b'ghimire_veshraj' 
b'Sensei LMS IDOR to send message'

04 Aug 2022

b'TikTok' disclosed a bug submitted by b'mrzheev' 
b'Unrestricted File Upload Blind Stored Xss in subdomain ads.tiktok.com'

04 Aug 2022

b'Reddit' disclosed a bug submitted by b'keer0k' 
b'XSS in redditmedia.com can compromise data of reddit.com'

03 Aug 2022

b'Reddit' disclosed a bug submitted by b'fransrosen' 
b'One-click account hijack for anyone using Apple sign-in with Reddit, due to response-type switch + leaking href to XSS on www.redditmedia.com'

02 Aug 2022

b'GitLab' disclosed a bug submitted by b'm-narayanan' 
b"Found Origin IP's lead to access to gitlab"

02 Aug 2022

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram' 
b'Insecure TLS Configuration #3530'

01 Aug 2022

b'Showmax' disclosed a bug submitted by b'qualwin38000' 
b'delete the subaccount from the user id'

01 Aug 2022

1 ... 109 110 111 112 113 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM