Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Rocket.Chat' disclosed a bug submitted by b'garretby' 
b'It is possible to elevate privileges for any authenticated user to view permissions matrix and view Direct messages without appropriate permissions.'

22 Sep 2022

b'Rocket.Chat' disclosed a bug submitted by b'danieljpp' 
b'Persistent CSS injection with marked markdown parser in Rocket.Chat'

22 Sep 2022

b'Rocket.Chat' disclosed a bug submitted by b'ghaem51' 
b'Regex account takeover'

22 Sep 2022

b'GitLab' disclosed a bug submitted by b'joaxcar' 
b'XSS in ZenTao integration affecting self hosted instances without strict CSP'

22 Sep 2022

b'8x8' disclosed a bug submitted by b'is-' 
b'DLL Search-Order Hijacking Vulnerability in work-64-exe-v7.16.3-1.exe'

22 Sep 2022

b'TikTok' disclosed a bug submitted by b'datph4m' 
b'Add products to any livestream.'

21 Sep 2022

b'TikTok' disclosed a bug submitted by b'datph4m' 
b'Create product discounts of any shop'

21 Sep 2022

b'PlayStation' disclosed a bug submitted by b'theflow0' 
b'size_t-to-int vulnerability in exFAT leads to memory corruption via malformed USB flash drives'

21 Sep 2022

b'Mattermost' disclosed a bug submitted by b'catenacyber' 
b'DOS: out of memory from gif through upload api'

21 Sep 2022

b'TikTok' disclosed a bug submitted by b'apapedulimu' 
b'IDOR on Tagged People'

20 Sep 2022

b'PlayStation' disclosed a bug submitted by b'theflow0' 
b'Use-after-free in setsockopt IPV6_2292PKTOPTIONS (CVE-2020-7457)'

20 Sep 2022

b'Vanilla' disclosed a bug submitted by b'admin0x00' 
b'CORS Misconfiguration on vanillaforums.com '

20 Sep 2022

b'MTN Group' disclosed a bug submitted by b'sachinrajput' 
b'There is no rate limit for SME REGISTRATION PORTAL'

19 Sep 2022

b'HackerOne' disclosed a bug submitted by b'mega7' 
b'HTML Injection in email via Name field'

18 Sep 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi' 
b'Airflow Daemon Mode Insecure Umask Privilege Escalation'

17 Sep 2022

b'Glassdoor' disclosed a bug submitted by b'seifelsallamy' 
b'XSS in www.glassdoor.com'

16 Sep 2022

b'Nextcloud' disclosed a bug submitted by b'tomorrowisnew_' 
b'SSRF via potential filter bypass with too lax local domain checking'

16 Sep 2022

b'Nextcloud' disclosed a bug submitted by b'daniel_calvino_sanchez' 
b'Last video frame is still sent after video is disabled in a call'

16 Sep 2022

b'Nextcloud' disclosed a bug submitted by b'ro0telqayser' 
b'Information exposure in in guzzlehttp/guzzle (https://github.com/nextcloud/3rdparty/tree/master/guzzlehttp/guzzle)'

16 Sep 2022

b'Shopify' disclosed a bug submitted by b'xenx' 
b'store internal email disclosed through shopify-data-exporter '

15 Sep 2022

1 ... 115 116 117 118 119 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM