Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Node.js' disclosed a bug submitted by b'goums' 
b'Permissions policies can be bypassed via process.mainModule'

19 Mar 2023

b'Node.js' disclosed a bug submitted by b'sno2' 
b'Regular Expression Denial of Service in Headers'

19 Mar 2023

b'Node.js' disclosed a bug submitted by b'bnoordhuis' 
b'Insecure loading of ICU data through ICU_DATA environment variable'

19 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'ogalland' 
b'UAF in OpenSSL up to 3.0.7'

18 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'leixiao' 
b'RCE vulnerability in apache-airflow-providers-apache-sqoop 3.1.0'

18 Mar 2023

b'Stripe' disclosed a bug submitted by b'bashcancare' 
b'CSRF in Importing CSV files [app.taxjar.com]'

16 Mar 2023

b'HackerOne' disclosed a bug submitted by b'mikkocarreon' 
b'[CVE-2022-44268] Arbitrary Remote Leak via ImageMagick'

16 Mar 2023

b'Tor' disclosed a bug submitted by b'hazae41' 
b'Snowflake server: Leak of TLS packets from other clients'

15 Mar 2023

b'JetBlue' disclosed a bug submitted by b'0101010101010101010101' 
b'Open Redirect - https://.jetblue.com/?url='

13 Mar 2023

b'IOVLabs' disclosed a bug submitted by b'luk-matczak' 
b'Traffic amplification attack via discovery protocol'

13 Mar 2023

b'HackerOne' disclosed a bug submitted by b'manish_adz' 
b'information disclosure of another company bug on video.'

12 Mar 2023

b'TD Bank' disclosed a bug submitted by b'devdevirl' 
b'Server-Status leads to exposure information'

11 Mar 2023

b'HackerOne' disclosed a bug submitted by b'fransrosen' 
b'Stored XSS on www.hackerone.com due to deleted S3-bucket from old page_widget'

10 Mar 2023

b'HackerOne' disclosed a bug submitted by b'buraaqsec' 
b'Scope information is leaked when visiting policy scopes tab of any External Program'

10 Mar 2023

b'Shopify' disclosed a bug submitted by b'kun_19' 
b'Attacker is able to query Github repositories of arbitrary Shopify Hydrogen Users '

09 Mar 2023

b'GitHub' disclosed a bug submitted by b'ryotak' 
b'Improper handling of null bytes in GitHub Actions Runner allows an attacker to set arbitrary environment variables'

09 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'christophwurst' 
b'Mail app stores cleartext password in database until OAUTH2 setup is done'

08 Mar 2023

b'U.S. Department of State' disclosed a bug submitted by b'tmz900' 
b'RXSS on https://travel.state.gov/content/travel/en/search.html'

08 Mar 2023

b'Snapchat' disclosed a bug submitted by b'prickn9' 
b"Delete anyone's content spotlight remotely."

06 Mar 2023

b'HackerOne' disclosed a bug submitted by b'rcoleman' 
b'SQL Injection in CVE Discovery Search '

06 Mar 2023

1 ... 110 111 112 113 114 ... 759

BY DENIS WERNER - @NOBBD - IMPRESSUM