Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'AMBER AI' disclosed a bug submitted by b'khizer47' 
b'Support Portal Takeover via Leaked API KEY'

22 Nov 2022

b'AMBER AI' disclosed a bug submitted by b'mrdot404' 
b'Open redirect that can lead to malicious websites'

21 Nov 2022

b'GitLab' disclosed a bug submitted by b'usd-responsible-disclosure' 
b'Dependecy Confusion via Lookup Request Forwarding to PyPi.org'

21 Nov 2022

b'Weblate' disclosed a bug submitted by b'tanvir_0x' 
b'No rate limiting for Remove Account lead to huge Mass mailings'

20 Nov 2022

b'MTN Group' disclosed a bug submitted by b'roland_hack' 
b'Reflected XSS in chatbot'

19 Nov 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'angeltsvetkov' 
b'Open Redirect at '

18 Nov 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nightm4re' 
b'IDOR on [HtUS]'

18 Nov 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'x3ph_' 
b'Reflected XSS | https://'

18 Nov 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'x3ph_' 
b'Reflected XSS | https://'

18 Nov 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fklet' 
b'LOGJ4 VUlnerability [HtUS]'

18 Nov 2022

b'Elastic' disclosed a bug submitted by b'newspaper' 
b'Default password on 34.120.209.175'

18 Nov 2022

b'8x8' disclosed a bug submitted by b'shuvam321' 
b'Directory Listing at https://...'

18 Nov 2022

b'ZeroBounce' disclosed a bug submitted by b'devdevirl' 
b'API tokens and Emails leaked lead to sensitive information Disclosure '

17 Nov 2022

b'Elastic' disclosed a bug submitted by b'dee-see' 
b'CSRF in AppSearch allows creation of "curations"'

17 Nov 2022

b'GitHub' disclosed a bug submitted by b'ajxchapman' 
b'[Git Gud] GitHub.com Svnbridge memcached deserialization vulnerability chain leading to Remote Code Execution'

16 Nov 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'joshatmotion' 
b'Ability to bypass locked Cloudflare WARP on wifi networks.'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'RCE via github import'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'CSP-bypass XSS in project settings page'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'XSS: `v-safe-html` is not safe enough'

16 Nov 2022

b'GitLab' disclosed a bug submitted by b'cryptopone' 
b'New /add_contacts /remove_contacts quick commands susseptible to XSS from Customer Contact firstname/lastname fields'

16 Nov 2022

1 ... 123 124 125 126 127 ... 759

BY DENIS WERNER - @NOBBD - IMPRESSUM