Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Informatica' disclosed a bug submitted by b'bigbear_' 
b'[doc.rt.informaticacloud.com] Reflected XSS via Stack Strace'

23 Jul 2022

b'Informatica' disclosed a bug submitted by b'bigbear_' 
b'[doc.rt.informaticacloud.com] Arbitrary File Reading via Double URL Encode'

23 Jul 2022

b'Panther Labs' disclosed a bug submitted by b'ibrahimatix0x01' 
b'reflected XSS on panther.com'

23 Jul 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'Rack CVE-2022-30122: Denial of Service Vulnerability in Rack Multipart Parsing'

23 Jul 2022

b'TikTok' disclosed a bug submitted by b'f_m' 
b'IDOR in report download functionality on ads.tiktok.com'

22 Jul 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'zeyu2001' 
b'CVE-2022-32214 - HTTP Request Smuggling Due To Improper Delimiting of Header Fields'

22 Jul 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'zeyu2001' 
b' CVE-2022-32213 - HTTP Request Smuggling Due to Flawed Parsing of Transfer-Encoding'

22 Jul 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'zeyu2001' 
b' CVE-2022-32215 - HTTP Request Smuggling Due to Incorrect Parsing of Multi-line Transfer-Encoding'

22 Jul 2022

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram' 
b'fix(cmd-socketio-server): mitigate cross site scripting attack #2068'

21 Jul 2022

b'TikTok' disclosed a bug submitted by b'0x7' 
b'DOM XSS on ads.tiktok.com'

20 Jul 2022

b'TikTok' disclosed a bug submitted by b'hein_thant' 
b'Internal Employee informations Disclosure via TikTok Athena api'

20 Jul 2022

b'LinkedIn' disclosed a bug submitted by b'sachin_kumar_' 
b'Can access the job name, creator name and can report any draft/under review/rejected job'

20 Jul 2022

b'8x8' disclosed a bug submitted by b'shuvam321' 
b'LFI via Jolokia at https://...:1293'

20 Jul 2022

b'Acronis' disclosed a bug submitted by b'thewikiii' 
b'HTML Injection in E-mail Not Resolved ()'

19 Jul 2022

b'Stripe' disclosed a bug submitted by b'tabaahi' 
b'Without verifying email and activate account, user can perform all action which are not supposed to be done'

18 Jul 2022

b'EXNESS' disclosed a bug submitted by b'omer' 
b'subdomain takeover at odoo-staging.exness.io'

18 Jul 2022

b'Acronis' disclosed a bug submitted by b'second_grade_pentester' 
b'unauth mosquitto ( client emails, ips, license keys exposure )'

18 Jul 2022

b'OneWeb' disclosed a bug submitted by b'thewikiii' 
b' Cross-site scripting (DOM-based)'

18 Jul 2022

b'8x8' disclosed a bug submitted by b'mr_k0anti' 
b'CVE-2019-11248 on http://...:9100/debug/pprof/goroutine'

18 Jul 2022

b'8x8' disclosed a bug submitted by b'mr_k0anti' 
b'Public Apache Tomcat /examples example directory'

18 Jul 2022

1 ... 123 124 125 126 127 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM