Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'Ability to read any emails through IDOR on Nextcloud Mail'

12 Apr 2023

b'HackerOne' disclosed a bug submitted by b'refaat01' 
b'adding h1_analyst_* to username for normal users '

12 Apr 2023

b'Brave Software' disclosed a bug submitted by b'mrzheev' 
b'UXss on brave browser via scan QR Code'

11 Apr 2023

b'Expedia Group Bug Bounty' disclosed a bug submitted by b'exploitmsf' 
b'Sensitive information for phpinfo.php at https://products.ean.com/'

11 Apr 2023

b'LinkedIn' disclosed a bug submitted by b'anandpingsafe' 
b"Can delete other user's post and company page post"

11 Apr 2023

b'Weblate' disclosed a bug submitted by b'triplesided' 
b'Testing flow includes a DeepSource secret'

11 Apr 2023

b'U.S. Department of State' disclosed a bug submitted by b'nepalihacker0x01' 
b'IDOR in TalentMAP API can be abused to enumerate personal information of all the users'

11 Apr 2023

b'MetaMask' disclosed a bug submitted by b'ronnyx2017' 
b'Bypass parsing of transaction data, users on the phishing site will transfer/approve ERC20 tokens without being alerted'

10 Apr 2023

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'Ability to control the filename when uploading a logo or favicon on theming'

10 Apr 2023

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'Full Passcode bypass on Nextcloud App iOS'

10 Apr 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'ostracize' 
b'Session mismatch leading to potential account takeover (local access required)'

10 Apr 2023

b'Nextcloud' disclosed a bug submitted by b'mdfarhanchowdhuryhasin' 
b'Website PHP source code returned in javascript'

10 Apr 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'ht0k' 
b'Security Unfavorable Specifications and Implementations in the CGI::Cookie Class'

09 Apr 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'ht0k' 
b"Ruby's CGI library has HTTP response splitting (HTTP header injection), leaking confidential information"

09 Apr 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'bn00rdhuis' 
b'Use of Cryptographically Weak Pseudo-Random Number Generator in WebCrypto keygen'

09 Apr 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'mhdawson_' 
b'Inadequate Encryption Strength in nodejs-current reads openssl.cnf from /home/iojs/build/... upon startup on MacOS'

09 Apr 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'vwx7' 
b'HTTP Request Smuggling Due to Incorrect Parsing of Header Fields'

09 Apr 2023

b'Elastic' disclosed a bug submitted by b'dee-see' 
b'Synthetics Recorder: Code injection when recording website with malicious content'

08 Apr 2023

b'ResMed' disclosed a bug submitted by b'pranav-pranayx01' 
b'[shop.resmed.com]CSRF leads to Unsubscribe victim from Communication and Reward Membership'

06 Apr 2023

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen' 
b'CSRF protection on OIDC login is broken'

04 Apr 2023

1 ... 121 122 123 124 125 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM