Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Internet Bug Bounty' disclosed a bug submitted by b'chamal' 
b'Use of uninitialized value of in req_parsebody method of lua_request.c'

17 Mar 2022

b'ownCloud' disclosed a bug submitted by b'n00b-cyborg' 
b'Theft of protected files on Android'

17 Mar 2022

b'TikTok' disclosed a bug submitted by b'arsene_lupin' 
b'Instance Page DOS within Organization on TikTok Ads'

17 Mar 2022

b'Aiven Ltd' disclosed a bug submitted by b'abrahack' 
b'0-day Cross Origin Request Forgery vulnerability in Grafana 8.x .'

16 Mar 2022

b'Slack' disclosed a bug submitted by b'hitman_47' 
b'Stored XSS through PDF viewer'

16 Mar 2022

b'Flickr' disclosed a bug submitted by b'c4rrilat0rr' 
b'Open redirect GET-Based on https://www.flickr.com/browser/upgrade/?continue='

16 Mar 2022

b'Reddit' disclosed a bug submitted by b'whitehacker18' 
b'registering with the same email address multiple times leads to account takeover '

14 Mar 2022

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'User files is disclosed when someone called while the screen is locked'

14 Mar 2022

b'Mattermost' disclosed a bug submitted by b'thesecuritydev' 
b'Specially crafted message request crashes the webapp for users who view the message'

14 Mar 2022

b'IBM' disclosed a bug submitted by b'0xelkomy' 
b'CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability - https://esccvc.de.ibm.com'

11 Mar 2022

b'IBM' disclosed a bug submitted by b'thesanjok' 
b'Public Jenkins instance with /script enabled'

11 Mar 2022

b'Reddit' disclosed a bug submitted by b'ahacker1' 
b'XSS via Mod Log Removed Posts'

10 Mar 2022

b'8x8' disclosed a bug submitted by b'ig420_vrush' 
b'Open Redirect on https://.8x8.com/login?nextPage=%2F'

10 Mar 2022

b'curl' disclosed a bug submitted by b'shobhit2401200' 
b'Use of Unsafe function || Strcpy'

09 Mar 2022

b'curl' disclosed a bug submitted by b'eliasknudsen' 
b'Binary output bypass'

09 Mar 2022

b'curl' disclosed a bug submitted by b'luminixaaron' 
b'Occasional use-after-free in multi_done() libcurl-7.81.0'

09 Mar 2022

b'Krisp' disclosed a bug submitted by b'mrirfan__07' 
b'Error Page Content Spoofing or Text Injection'

09 Mar 2022

b'Krisp' disclosed a bug submitted by b'blackxxhat' 
b'Unsubscripe linkes leaked'

09 Mar 2022

b'Equifax' disclosed a bug submitted by b'miguel_santareno' 
b'RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter'

09 Mar 2022

b'FetLife' disclosed a bug submitted by b'trieulieuf9' 
b'Race condition in endpoint POST fetlife.com/users/invitation, allow attacker to generate unlimited invites'

09 Mar 2022

1 ... 121 122 123 124 125 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM