Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'rodriguezjorgex' 
b'Path traversal leads to reading of local files on and '

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xd3adc0de' 
b'Reflected XSS in '

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'iam_a_jinchuriki' 
b'xmlrpc.php file enabled at .org'

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'abhinavsecondary' 
b'Client side authentication leads to Auth Bypass'

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xd3adc0de' 
b'Reflected XSS in '

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'abhinavsecondary' 
b'HAProxy stats panel exposed externally'

24 Mar 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xd3adc0de' 
b'Reflected XSS in '

24 Mar 2023

b'Uber' disclosed a bug submitted by b'zhero_' 
b'HTML injection via insecure parameter [https://www.ubercarshare.com/]'

23 Mar 2023

b'Uber' disclosed a bug submitted by b'zhero_' 
b'DOM based XSS via insecure parameter on [ https://uberpay-mock-psp.uber.com ]'

23 Mar 2023

b'Uber' disclosed a bug submitted by b'kxyry' 
b"[uchat.uberinternals.com] Mattermost doesn't check Origin in Websockets, which leads to the Critical Inforamation Leakage."

23 Mar 2023

b'Uber' disclosed a bug submitted by b'kxyry' 
b'[data-07.uberinternal.com] SSRF in Portainer app lead to access to Internal Docker API without Auth'

23 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2023-27537: HSTS double-free'

23 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'nyxsorcerer' 
b'Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522)'

23 Mar 2023

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-27538: SSH connection too eager reuse still'

22 Mar 2023

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-27536: GSS delegation too eager connection re-use'

22 Mar 2023

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-27535: FTP too eager connection reuse'

22 Mar 2023

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-27534: SFTP path ~ resolving discrepancy'

22 Mar 2023

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-27533: Telnet option IAC injection'

22 Mar 2023

b'GitHub Security Lab' disclosed a bug submitted by b'gregxsunday' 
b'[Go]: Add Beego.Input.RequestBody source to Beego framework'

22 Mar 2023

b'GitHub Security Lab' disclosed a bug submitted by b'sim4n6' 
b'[Python] Unsafe unpacking using shutil.unpack_archive() query and tests'

22 Mar 2023

1 ... 125 126 127 128 129 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM