Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Stripe' disclosed a bug submitted by b'fisjkars' 
b'Verifying email bypass'

03 Mar 2023

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Targeted phishing attacks in Login flow v2'

03 Mar 2023

b'Shopify' disclosed a bug submitted by b'kun_19' 
b'Shop App - Attacker is able to intercept authorization code during authentication (OAuth) and is able to get access to Microsoft Outlook email account'

02 Mar 2023

b'Expedia Group Bug Bounty' disclosed a bug submitted by b'qualw1n' 
b'Open Redirect in Logout & Login'

02 Mar 2023

b'Yelp' disclosed a bug submitted by b'msgandole' 
b'Direct access to tox.ini file which is contain configuration details'

02 Mar 2023

b'Stripe' disclosed a bug submitted by b'sn-shyk' 
b'HTML Injection in the Invoice memos field'

01 Mar 2023

b'IOVLabs' disclosed a bug submitted by b'teknogeek' 
b'JSON RPC methods for debugging enabled by default allow DoS'

27 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'Messages can still be seen on conversation after expiring when cron is misconfigured'

27 Feb 2023

b'Stripe' disclosed a bug submitted by b'ian' 
b'Fee discounts can be redeemed many times, resulting in unlimited fee-free transactions'

25 Feb 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'monnerat' 
b'HTTP multi-header compression denial of service'

24 Feb 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-23914: HSTS ignored on multiple requests'

24 Feb 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'nyymi' 
b'CVE-2023-23915: HSTS amnesia with --parallel'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mikeisastar' 
b'[] Bug Reports allow for Unrestricted File Upload'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'carpc' 
b'Install.php File Exposure on Drupal'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xd3adc0de' 
b'[XSS] Reflected XSS via POST request'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'vv-m' 
b'CORS Misconfiguration in https:///accounts/login/'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'raditzz' 
b'DoS at (CVE-2018-6389)'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0r10nh4ck' 
b'Sensitive Data Exposure at https://'

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0r10nh4ck' 
b'AWS Credentials Disclosure at '

24 Feb 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0r10nh4ck' 
b'Upload and delete files in debug page without access control.'

24 Feb 2023

1 ... 128 129 130 131 132 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM