Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'lemlist' disclosed a bug submitted by b'omarelfarsaoui' 
b'[app.lemlist.com] Improper handling of payment lead to bypass payment'

17 May 2022

b'TikTok' disclosed a bug submitted by b'naaash' 
b'Privilege Escalation on TikTok for Business'

16 May 2022

b'Automattic' disclosed a bug submitted by b'sawrav-chowdhury' 
b" Site information's Display Name section vulnerable for XSS attacks and HTML Injections."

16 May 2022

b'lemlist' disclosed a bug submitted by b'mr23r0' 
b'Security misconfiguration '

16 May 2022

b'curl' disclosed a bug submitted by b'sybr' 
b'CVE-2022-27781: CERTINFO never-ending busy-loop'

16 May 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'albertspedersen' 
b'HTTP Request Smuggling in Transform Rules using hexadecimal escape sequences in the concat() function'

16 May 2022

b'SMTP2GO BBP' disclosed a bug submitted by b'mrrobot2050' 
b'Origin IP found, WAF Cloudflare Bypass'

15 May 2022

b'curl' disclosed a bug submitted by b'iylz' 
b'Credential leak on redirect'

14 May 2022

b'Shopify' disclosed a bug submitted by b'zambo' 
b'Disclose STUFF member name and make actions.'

14 May 2022

b'Shopify' disclosed a bug submitted by b'zambo' 
b'Disclose customer orders details by shopify chat application.'

14 May 2022

b'Consensys' disclosed a bug submitted by b'polem4rch' 
b'Public Postman Api Collection Leaks Internal access to https://assets-paris-dev.codefi.network/ '

14 May 2022

b'MTN Group' disclosed a bug submitted by b'ibrahimatix0x01' 
b'Download full backup [Mtn.co.rw]'

14 May 2022

b'curl' disclosed a bug submitted by b'iylz' 
b'error parse uri path in curl'

13 May 2022

b'curl' disclosed a bug submitted by b'pappacoda' 
b'Memory leak in CURLOPT_XOAUTH2_BEARER'

13 May 2022

b'curl' disclosed a bug submitted by b'nyymi' 
b'Cookie injection from non-secure context'

13 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-016: Query to detect insecure configuration of Spring Boot Actuator'

13 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'[CPP]: Add query for CWE-754: Improper Check for Unusual or Exceptional Conditions when using functions scanf '

13 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java]: CWE-552 Add sources and sinks to detect unsafe getResource calls in Java EE applications'

13 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'[CPP]: Add query for CWE-190: Integer Overflow or Wraparound when using transform after operation'

13 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java]: CWE-321 - Query to detect hardcoded JWT secret keys'

13 May 2022

1 ... 109 110 111 112 113 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM