Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'IOVLabs' disclosed a bug submitted by b'luk-matczak' 
b'Traffic amplification attack via discovery protocol'

13 Mar 2023

b'HackerOne' disclosed a bug submitted by b'manish_adz' 
b'information disclosure of another company bug on video.'

12 Mar 2023

b'TD Bank' disclosed a bug submitted by b'devdevirl' 
b'Server-Status leads to exposure information'

11 Mar 2023

b'HackerOne' disclosed a bug submitted by b'fransrosen' 
b'Stored XSS on www.hackerone.com due to deleted S3-bucket from old page_widget'

10 Mar 2023

b'HackerOne' disclosed a bug submitted by b'buraaqsec' 
b'Scope information is leaked when visiting policy scopes tab of any External Program'

10 Mar 2023

b'Shopify' disclosed a bug submitted by b'kun_19' 
b'Attacker is able to query Github repositories of arbitrary Shopify Hydrogen Users '

09 Mar 2023

b'GitHub' disclosed a bug submitted by b'ryotak' 
b'Improper handling of null bytes in GitHub Actions Runner allows an attacker to set arbitrary environment variables'

09 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'christophwurst' 
b'Mail app stores cleartext password in database until OAUTH2 setup is done'

08 Mar 2023

b'U.S. Department of State' disclosed a bug submitted by b'tmz900' 
b'RXSS on https://travel.state.gov/content/travel/en/search.html'

08 Mar 2023

b'Snapchat' disclosed a bug submitted by b'prickn9' 
b"Delete anyone's content spotlight remotely."

06 Mar 2023

b'HackerOne' disclosed a bug submitted by b'rcoleman' 
b'SQL Injection in CVE Discovery Search '

06 Mar 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'mattipv4' 
b'Extraction of Pages build scripts, config values, tokens, etc. via symlinks'

06 Mar 2023

b'Stripe' disclosed a bug submitted by b'phor3nsic' 
b'Object injection in `stripe-billing-typographic` GitHub project via /auth/login '

06 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'primebeast' 
b'Missing rate limiting on password reset functionality allows to send lot of emails'

05 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'czchen' 
b'Argo CD reconciles apps outside configured namespaces when sharding is enabled'

05 Mar 2023

b'Rocket.Chat' disclosed a bug submitted by b'yuske' 
b'Rocket.Chat Server RCE'

04 Mar 2023

b'Stripe' disclosed a bug submitted by b'fisjkars' 
b'Verifying email bypass'

03 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Targeted phishing attacks in Login flow v2'

03 Mar 2023

b'Shopify' disclosed a bug submitted by b'kun_19' 
b'Shop App - Attacker is able to intercept authorization code during authentication (OAuth) and is able to get access to Microsoft Outlook email account'

02 Mar 2023

b'Expedia Group Bug Bounty' disclosed a bug submitted by b'qualw1n' 
b'Open Redirect in Logout & Login'

02 Mar 2023

1 ... 121 122 123 124 125 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM