Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs' 
b'Golang : Hardcoded secret used for signing JWT'

15 Jun 2022

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'CPP: Add query for CWE-243 Creation of chroot Jail Without Changing Working Directory'

15 Jun 2022

b'UPchieve' disclosed a bug submitted by b'011alsanosi' 
b'Hyper Link Injection while signup '

15 Jun 2022

b'Acronis' disclosed a bug submitted by b'mega7' 
b'HTML Injection in E-mail'

14 Jun 2022

b'Acronis' disclosed a bug submitted by b'ub3rsick' 
b'Reflected Cross Site Scripting at ColdFusion Debugging Panel http://www.grouplogic.com/CFIDE/debug/cf_debugFr.cfm'

14 Jun 2022

b'Acronis' disclosed a bug submitted by b'ub3rsick' 
b'Reflected Cross Site Scripting at http://www.grouplogic.com/files/glidownload/verify3.asp [Uppercase Filter Bypass]'

14 Jun 2022

b'Ruby on Rails' disclosed a bug submitted by b'windshock' 
b'Rails::Html::SafeListSanitizer vulnerable to xss attack in an environment that allows the style tag'

14 Jun 2022

b'Showmax' disclosed a bug submitted by b'saidkira' 
b'lack of rate limit on athentification login page & forgot password page'

13 Jun 2022

b'UPchieve' disclosed a bug submitted by b'dark_haxor' 
b'All user password hash can be seen from admin panel'

11 Jun 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'haxatron1' 
b'CVE-2022-30115: HSTS bypass via trailing dot'

11 Jun 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'haxatron1' 
b'CVE-2022-27780: percent-encoded path separator in URL host'

11 Jun 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'haxatron1' 
b'CVE-2022-27779: cookie for trailing dot TLD'

11 Jun 2022

b'TikTok' disclosed a bug submitted by b'datph4m' 
b'disclosure the live_analytics information of any livestream.'

11 Jun 2022

b'TikTok' disclosed a bug submitted by b'noob_but_cut3' 
b'Email address disclosure via invite token validatiion'

11 Jun 2022

b'PlayStation' disclosed a bug submitted by b'theflow0' 
b'bd-j exploit chain'

10 Jun 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'tmz900' 
b'RXSS on '

10 Jun 2022

b'Nextcloud' disclosed a bug submitted by b'michag86' 
b'Moderator can enable cam/mic remotely if cam/mic-permission was disabled while user has activated cam/mic'

09 Jun 2022

b'curl' disclosed a bug submitted by b'ddme' 
b'Integer overflows in unescape_word()'

09 Jun 2022

b'curl' disclosed a bug submitted by b'maslahhunter' 
b'match'

09 Jun 2022

b'Reddit' disclosed a bug submitted by b'3amii' 
b'Several Subdomains Takeover'

08 Jun 2022

1 ... 129 130 131 132 133 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM