Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'lauritz' 
b'[user_oidc] Stored XSS via Authorization Endpoint - Safari-Only'

18 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'lauritz' 
b'[user_oidc] Unencrypted Communications'

18 Dec 2022

b'Khan Academy' disclosed a bug submitted by b'shuvam321' 
b'Email Verification Bypass Allows Users to Add & verify Any Email As Guardians Email '

17 Dec 2022

b'Sony' disclosed a bug submitted by b'n0x496n' 
b'LFI at http://www.'

16 Dec 2022

b'Consensys' disclosed a bug submitted by b'krrish_hackk' 
b'Sub-Domain Takeover at http://www.codefi.consensys.net/'

16 Dec 2022

b'Automattic' disclosed a bug submitted by b'aaroncarson' 
b'Akismet API keys are exposed by authentication method'

16 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'0x3bdo' 
b'Exposed Log File Lead to Full Internal path disclosure at [https://nextcloud.com/wp-content/debug.log] '

15 Dec 2022

b'MTN Group' disclosed a bug submitted by b'jimmisimon' 
b'Firebase credentials leak'

15 Dec 2022

b'Nintendo' disclosed a bug submitted by b'rambo6glaz' 
b'[MK8DX] Improper verification of Competition creation allows to create "Official" competitions'

15 Dec 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'ReDoS (Rails::Html::PermitScrubber.scrub_attribute)'

14 Dec 2022

b'Ruby on Rails' disclosed a bug submitted by b'0b5cur17y' 
b'Rails::Html::SafeListSanitizer vulnerable to XSS when certain tags are allowed (math+style || svg+style)'

14 Dec 2022

b'Ruby on Rails' disclosed a bug submitted by b'0b5cur17y' 
b'Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)'

14 Dec 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'theinternetofdefcon_' 
b'Electron CVE-2022-35954 Delimiter Injection Vulnerability in exportVariable'

14 Dec 2022

b'Ruby' disclosed a bug submitted by b'djspinmonkey' 
b'Attacker can smuggle a malicious domain in a URI object.'

13 Dec 2022

b'GitHub' disclosed a bug submitted by b'legit-security' 
b'DoS via markdown API from unauthenticated user'

13 Dec 2022

b'Twitter' disclosed a bug submitted by b'jub0bs' 
b'Link-shortener bypass (regression on fix for #1032610)'

12 Dec 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'mattipv4' 
b'cd=false (DNSSEC) not respected in DNS over HTTPS JSON requests'

12 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'ibrahim71192' 
b'A vulnerability classified as critical has been found in gsi-openssh-server 7.9p1 on Fedora (Connectivity Software) on server (http://95.217.64.181:22'

10 Dec 2022

b'Kubernetes' disclosed a bug submitted by b'weinongw' 
b'SSRF vulnerability can be exploited when a hijacked aggregated api server such as metrics-server returns 30X'

10 Dec 2022

b'Nextcloud' disclosed a bug submitted by b'mik-patient' 
b'[nextcloud/server] Moment.js vulnerable to Inefficient Regular Expression Complexity'

09 Dec 2022

1 ... 135 136 137 138 139 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM