Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Internet Bug Bounty' disclosed a bug submitted by b'monnerat' 
b'HTTP multi-header compression denial of service'

24 Feb 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-23914: HSTS ignored on multiple requests'

24 Feb 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-23915: HSTS amnesia with --parallel'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mikeisastar' 
b'[] Bug Reports allow for Unrestricted File Upload'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'carpc' 
b'Install.php File Exposure on Drupal'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xd3adc0de' 
b'[XSS] Reflected XSS via POST request'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'vv-m' 
b'CORS Misconfiguration in https:///accounts/login/'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'raditzz' 
b'DoS at (CVE-2018-6389)'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0r10nh4ck' 
b'Sensitive Data Exposure at https://'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0r10nh4ck' 
b'AWS Credentials Disclosure at '

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0r10nh4ck' 
b'Upload and delete files in debug page without access control.'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'interc3pt3r' 
b'Reflected XSS at '

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'hack3ron___1' 
b'Authentication Bypass Using Default Credentials on '

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'syarifmsajjad' 
b'Sensitive information disclosure [HtUS]'

24 Feb 2023

b'Automattic' disclosed a bug submitted by b'0xwega74' 
b'Stored XSS on app.crowdsignal.com your-subdomain.crowdsignal.net via Thank You Header'

24 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'rullzer' 
b'Download permissions can be changed by resharer'

24 Feb 2023

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'Users querying dim_hacker_reports table through Analytics API can determine data from dim_reports table using WHERE or HAVING query'

22 Feb 2023

b'Krisp' disclosed a bug submitted by b'mikemyers' 
b'SQL Injection + Insecure Deserialization leads to Remote Code Execution on https://krisp.ai'

22 Feb 2023

b'Node.js' disclosed a bug submitted by b'timon8' 
b'CRLF Injection in Nodejs undici via host'

22 Feb 2023

b'curl' disclosed a bug submitted by b'monnerat' 
b'CVE-2023-23916: HTTP multi-header compression denial of service'

20 Feb 2023

1 ... 127 128 129 130 131 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM