Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'Arbitrary file read via the bulk imports UploadsPipeline'

21 Mar 2022

b'Glassdoor' disclosed a bug submitted by b'safehacker_2715' 
b'Get all personal email IDs of Glassdoor users[No user interaction required]'

21 Mar 2022

b'SecurityScorecard' disclosed a bug submitted by b'ww1' 
b'RXSS '

20 Mar 2022

b'MTN Group' disclosed a bug submitted by b'xlife' 
b'Insecure crossdomain.xml on https://vdc.mtnonline.com/'

20 Mar 2022

b'MTN Group' disclosed a bug submitted by b'xlife' 
b'Exposed .bash_history at http://21days2017.mtncameroon.net/.bash_history'

20 Mar 2022

b'Yoti' disclosed a bug submitted by b'ww1' 
b'PIN BYPASS '

18 Mar 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'unknownsh' 
b'Military name,email,phone,address,certdata Disclosure '

18 Mar 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pirneci' 
b'CVE-2020-3452 on https:///'

18 Mar 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pirneci' 
b'Arbitrary File Deletion (CVE-2020-3187) on '

18 Mar 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi' 
b'CSRF - Modify User Settings with one click - Account TakeOver'

18 Mar 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi' 
b'Reflected XSS - in Email Input'

18 Mar 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi' 
b'IDOR - Delete Users Saved Projects'

18 Mar 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi' 
b'CSRF - Delete Account (Urgent)'

18 Mar 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'3th1c_yuk1' 
b'CVE-2021-42567 - Apereo CAS Reflected XSS on https://'

18 Mar 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pirneci' 
b'XSS because of Akamai ARL misconfiguration on '

18 Mar 2022

b'Mail.ru' disclosed a bug submitted by b'mkhazov' 
b'RCE .api/nr/report/{id}/download '

18 Mar 2022

b'Mail.ru' disclosed a bug submitted by b'fallenskill' 
b'XSS Stored on https://seedr.ru'

18 Mar 2022

b'Mail.ru' disclosed a bug submitted by b'fallenskill' 
b' OS command injection on seedr.ru'

18 Mar 2022

b'Mail.ru' disclosed a bug submitted by b'mkhazov' 
b'SSRF + RCE fastCGI POST /api/nr/video'

18 Mar 2022

b'U.S. General Services Administration' disclosed a bug submitted by b'hollaatm3' 
b'IDOR at https://demo.sftool.gov/TwsHome/ScorecardManage/ via scorecard name'

17 Mar 2022

1 ... 120 121 122 123 124 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM