Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'HTML injection that may lead to XSS on HackerOne.com through H1 Triage Wizard Chrome Extension'

14 Feb 2023

b'Stripe' disclosed a bug submitted by b'd_sharad' 
b'Promotion code can be used more than redemption limit.'

13 Feb 2023

b'Twitter' disclosed a bug submitted by b'eissen5c' 
b'The Deleted Polls is Still Accessable after 30 Days'

13 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'spell1' 
b'Splunk Sensitive Information Disclosure @axiellstore.usahec.org'

13 Feb 2023

b'HackerOne' disclosed a bug submitted by b'syjane' 
b'HackerOne Undisclosed Report Leak via PoC of Full Disclosure on Hacktivity'

10 Feb 2023

b'EXNESS' disclosed a bug submitted by b'ashwarya' 
b'Double forward slash breaks server-side restrictions & allows access to prohibited services from a partner account'

10 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'Desktop client can be tricked into opening/executing local files when clicking a nc://open/ link'

10 Feb 2023

b'8x8 Bounty' disclosed a bug submitted by b'ex0dus-0x' 
b'Jitsi Desktop Client RCE By Interacting with Malicious URL Schemes on Windows'

10 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'obitorasu' 
b'SSRF via filter bypass due to lax checking on IPs'

10 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'aditya404' 
b'No password length restriction in reset password endpoint'

09 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'mik-patient' 
b'Vulnerable moment-timezone version shipped'

08 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'mik-patient' 
b'Suspicious login app ships old league/flysystem version'

08 Feb 2023

b'Hyperledger' disclosed a bug submitted by b'r3drush' 
b'Dependency confusion in https://github.com/hyperledger/aries-mobile-agent-react-native '

07 Feb 2023

b'Yelp' disclosed a bug submitted by b'ilpadrino' 
b'Fraudulent claim of business.'

06 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'supr4s' 
b'Mail app - blind SSRF via smtpHost parameter'

06 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'supr4s' 
b'Mail app - Blind SSRF via Sierve server fonctionnality and sieveHost parameter'

06 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'supr4s' 
b'Mail app - blind SSRF via imapHost parameter'

06 Feb 2023

b'JetBlue' disclosed a bug submitted by b'doosec101' 
b'Open Redirection'

05 Feb 2023

b'JetBlue' disclosed a bug submitted by b'doosec101' 
b'Access to tomcat-manager with default creds'

05 Feb 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2022-43551: Another HSTS bypass via IDN'

03 Feb 2023

1 ... 124 125 126 127 128 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM