Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Acronis' disclosed a bug submitted by b'f_m' 
b'IDOR on www.acronis.com API lead to steal private business user information'

31 Aug 2021

b'UPchieve' disclosed a bug submitted by b'elcayser-0x0a' 
b'old session dose not expire after password change '

31 Aug 2021

b'UPchieve' disclosed a bug submitted by b'aaruthra' 
b'Failed to validate Session after Password Change'

31 Aug 2021

b'Affirm' disclosed a bug submitted by b'litt1eb0y' 
b'Open Redirect'

31 Aug 2021

b'Homebrew' disclosed a bug submitted by b'gedwards' 
b'Bypass of the installation sandbox by injecting keystrokes with TIOCSTI'

30 Aug 2021

b'Kubernetes' disclosed a bug submitted by b'pulpkk' 
b'Index Out Of Bounds in protobuf unmarshalling'

30 Aug 2021

b'Sifchain' disclosed a bug submitted by b'escanor56' 
b'SSH server due to Improper Signature Verification'

30 Aug 2021

b'GitLab' disclosed a bug submitted by b'joaxcar' 
b'A deactivated user can access data through GraphQL'

30 Aug 2021

b'GitLab' disclosed a bug submitted by b'maruthi12' 
b'A profile page of a user can be denied from loading by appending .html to the username'

30 Aug 2021

b'GitLab' disclosed a bug submitted by b'maruthi12' 
b'Guest users can create new test cases'

30 Aug 2021

b'Mail.ru' disclosed a bug submitted by b'rainbow_json' 
b'[Biz] [Mailer] * '

30 Aug 2021

b'MTN Group' disclosed a bug submitted by b'logic_err0r' 
b'Unauthenticated Arbitrary File Deletion (CVE-2020-3187)'

29 Aug 2021

b'Uber' disclosed a bug submitted by b'ayoubfathi_' 
b'Publicly exposed HashiCorp Vault (Secrets management) at usec-gcp-staging.uberinternal.com & usec-gcp.uberinternal.com'

27 Aug 2021

b'Basecamp' disclosed a bug submitted by b'neex' 
b'HTTP Request Smuggling via HTTP/2'

27 Aug 2021

b'Courier' disclosed a bug submitted by b'bugera' 
b'2 Bypass of #1067533 rate limit via X-Forwarded-For<space>: Source IP on ( www.trycourier.app )'

27 Aug 2021

b'UPchieve' disclosed a bug submitted by b'lu3ky-13' 
b'No Rate Limit On Contact Us '

27 Aug 2021

b'Tor' disclosed a bug submitted by b'sasikaran' 
b'Information Exposure Through Directory Listing'

27 Aug 2021

b'Nginx (IBB)' disclosed a bug submitted by b'luismerino' 
b'1-byte heap buffer overflow in DNS resolver'

27 Aug 2021

b'Squid Cache (IBB)' disclosed a bug submitted by b'regilero' 
b'HTTP Smuggling multiple issues in Squid 3.x & squid 4.x'

26 Aug 2021

b'Squid Cache (IBB)' disclosed a bug submitted by b'jeriko_one' 
b'Basic Authentication Heap Overflow'

26 Aug 2021

1 ... 128 129 130 131 132 ... 694

BY DENIS WERNER - @NOBBD - IMPRESSUM