Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Stripe' disclosed a bug submitted by b'bashcancare' 
b'CSRF in Importing CSV files [app.taxjar.com]'

16 Mar 2023

b'HackerOne' disclosed a bug submitted by b'mikkocarreon' 
b'[CVE-2022-44268] Arbitrary Remote Leak via ImageMagick'

16 Mar 2023

b'Tor' disclosed a bug submitted by b'hazae41' 
b'Snowflake server: Leak of TLS packets from other clients'

15 Mar 2023

b'JetBlue' disclosed a bug submitted by b'0101010101010101010101' 
b'Open Redirect - https://.jetblue.com/?url='

13 Mar 2023

b'IOVLabs' disclosed a bug submitted by b'luk-matczak' 
b'Traffic amplification attack via discovery protocol'

13 Mar 2023

b'HackerOne' disclosed a bug submitted by b'manish_adz' 
b'information disclosure of another company bug on video.'

12 Mar 2023

b'TD Bank' disclosed a bug submitted by b'devdevirl' 
b'Server-Status leads to exposure information'

11 Mar 2023

b'HackerOne' disclosed a bug submitted by b'fransrosen' 
b'Stored XSS on www.hackerone.com due to deleted S3-bucket from old page_widget'

10 Mar 2023

b'HackerOne' disclosed a bug submitted by b'buraaqsec' 
b'Scope information is leaked when visiting policy scopes tab of any External Program'

10 Mar 2023

b'Shopify' disclosed a bug submitted by b'kun_19' 
b'Attacker is able to query Github repositories of arbitrary Shopify Hydrogen Users '

09 Mar 2023

b'GitHub' disclosed a bug submitted by b'ryotak' 
b'Improper handling of null bytes in GitHub Actions Runner allows an attacker to set arbitrary environment variables'

09 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'christophwurst' 
b'Mail app stores cleartext password in database until OAUTH2 setup is done'

08 Mar 2023

b'U.S. Department of State' disclosed a bug submitted by b'tmz900' 
b'RXSS on https://travel.state.gov/content/travel/en/search.html'

08 Mar 2023

b'Snapchat' disclosed a bug submitted by b'prickn9' 
b"Delete anyone's content spotlight remotely."

06 Mar 2023

b'HackerOne' disclosed a bug submitted by b'rcoleman' 
b'SQL Injection in CVE Discovery Search '

06 Mar 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'mattipv4' 
b'Extraction of Pages build scripts, config values, tokens, etc. via symlinks'

06 Mar 2023

b'Stripe' disclosed a bug submitted by b'phor3nsic' 
b'Object injection in `stripe-billing-typographic` GitHub project via /auth/login '

06 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'primebeast' 
b'Missing rate limiting on password reset functionality allows to send lot of emails'

05 Mar 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'czchen' 
b'Argo CD reconciles apps outside configured namespaces when sharding is enabled'

05 Mar 2023

b'Rocket.Chat' disclosed a bug submitted by b'yuske' 
b'Rocket.Chat Server RCE'

04 Mar 2023

1 ... 127 128 129 130 131 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM