Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'EXNESS' disclosed a bug submitted by b'ashwarya' 
b'Double forward slash breaks server-side restrictions & allows access to prohibited services from a partner account'

10 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'Desktop client can be tricked into opening/executing local files when clicking a nc://open/ link'

10 Feb 2023

b'8x8 Bounty' disclosed a bug submitted by b'ex0dus-0x' 
b'Jitsi Desktop Client RCE By Interacting with Malicious URL Schemes on Windows'

10 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'obitorasu' 
b'SSRF via filter bypass due to lax checking on IPs'

10 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'aditya404' 
b'No password length restriction in reset password endpoint'

09 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'mik-patient' 
b'Vulnerable moment-timezone version shipped'

08 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'mik-patient' 
b'Suspicious login app ships old league/flysystem version'

08 Feb 2023

b'Hyperledger' disclosed a bug submitted by b'r3drush' 
b'Dependency confusion in https://github.com/hyperledger/aries-mobile-agent-react-native '

07 Feb 2023

b'Yelp' disclosed a bug submitted by b'ilpadrino' 
b'Fraudulent claim of business.'

06 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'supr4s' 
b'Mail app - blind SSRF via smtpHost parameter'

06 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'supr4s' 
b'Mail app - Blind SSRF via Sierve server fonctionnality and sieveHost parameter'

06 Feb 2023

b'Nextcloud' disclosed a bug submitted by b'supr4s' 
b'Mail app - blind SSRF via imapHost parameter'

06 Feb 2023

b'JetBlue' disclosed a bug submitted by b'doosec101' 
b'Open Redirection'

05 Feb 2023

b'JetBlue' disclosed a bug submitted by b'doosec101' 
b'Access to tomcat-manager with default creds'

05 Feb 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2022-43551: Another HSTS bypass via IDN'

03 Feb 2023

b'Sorare' disclosed a bug submitted by b'gokulsk' 
b'Mystery with a leaked token and Reusability of email confirmation link leading to Account Takeover'

03 Feb 2023

b'TikTok' disclosed a bug submitted by b'amans' 
b'TikTok 2FA Bypass'

03 Feb 2023

b'Shopify' disclosed a bug submitted by b'kannthu' 
b'XSS at jamfpro.shopifycloud.com'

02 Feb 2023

b'Judge.me ' disclosed a bug submitted by b'penguinshelp' 
b'Self-XSS due to image URL can be eploited via XSSJacking techniques in review email'

01 Feb 2023

b'Judge.me ' disclosed a bug submitted by b'criptex' 
b'HTML INJECTION (STORED)'

01 Feb 2023

1 ... 129 130 131 132 133 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM