Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zenly' disclosed a bug submitted by b'yetanotherhacker' 
b'Account Takeover via SMS Authentication Flow '

12 Jan 2022

b'Nord Security' disclosed a bug submitted by b'paramdham' 
b'CSRF to change password'

12 Jan 2022

b'Gener8' disclosed a bug submitted by b'paramdham' 
b'Clickjacking to change email address'

12 Jan 2022

b'Node.js' disclosed a bug submitted by b'rugvip' 
b'Prototype pollution via console.table properties'

11 Jan 2022

b'Mail.ru' disclosed a bug submitted by b'kassem_s94' 
b'blog/wp-json/wp/v2/users FILE is enable it will used for bruteforce attack the admin panel at blog/wp-login.php'

09 Jan 2022

b'MariaDB' disclosed a bug submitted by b'realtess' 
b'Grafana LFI on https://grafana.mariadb.org'

06 Jan 2022

b'Twitter' disclosed a bug submitted by b'ian' 
b'Subdomain takeover of images.crossinstall.com'

05 Jan 2022

b'Mattermost' disclosed a bug submitted by b'at11zt00' 
b'ABLE TO TRICK THE VICTIM INTO USING A CRAFTED EMAIL ADDRESS FOR A PARTICULAR SESSION AND THEN LATER TAKE BACK THE ACCOUNT '

05 Jan 2022

b'8x8' disclosed a bug submitted by b'n1had' 
b'Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)'

05 Jan 2022

b'Nutanix' disclosed a bug submitted by b'kauenavarro' 
b'OPEN REDIRECT '

04 Jan 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'chamal' 
b'Buffer overflow in req_parsebody method in lua_request.c'

04 Jan 2022

b'Acronis' disclosed a bug submitted by b'plantos' 
b'%0A (New line) and limitness URL leads to DoS at all system [Main adress (https://www.acronis.com/)]'

04 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mr_x_strange' 
b'Log4Shell: RCE 0-day exploit on '

03 Jan 2022

b'Khan Academy' disclosed a bug submitted by b'hackthedevil' 
b'EMAIL SPOOFING'

02 Jan 2022

b'8x8' disclosed a bug submitted by b'sparroww' 
b'Default credentials lead to Spring Boot Admin dashboard access'

02 Jan 2022

b'LINE' disclosed a bug submitted by b'66ed3gs' 
b"Improper authorization allows disclosing users' notification data in Notification channel server"

31 Dec 2021

b'Zivver' disclosed a bug submitted by b'hack_4fun' 
b'ADB Backup is enabled within AndroidManifest'

31 Dec 2021

b'Mail.ru' disclosed a bug submitted by b'astates' 
b'Read-only user can edit user segments.'

30 Dec 2021

b'Monero' disclosed a bug submitted by b'fukuyama' 
b'DLL hijacking in Monero GUI for Windows 0.17.3.0 would allow an attacker to perform remote command execution'

30 Dec 2021

b'VK.com' disclosed a bug submitted by b'executor' 
b' API- /'

30 Dec 2021

1 ... 130 131 132 133 134 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM