Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'yinvi777' 
b'Staff can use BULK_OPERATIONS_FINISH webhook topic using Graphql without permissions all'

04 Dec 2021

b'TikTok' disclosed a bug submitted by b'semsem123' 
b'reflected xss on the path m.tiktok.com'

03 Dec 2021

b'TikTok' disclosed a bug submitted by b'lewaperbb' 
b'IDOR the ability to view support tickets of any user on seller platform'

03 Dec 2021

b'Shopify' disclosed a bug submitted by b'c0rv4x' 
b"[h1-2102] [Yaworski's Broskis] Suspected overcharge and chargebacks in PoS"

03 Dec 2021

b'Open-Xchange' disclosed a bug submitted by b'ihsinme' 
b'access to stack memory beyond array boundaries'

03 Dec 2021

b'ownCloud' disclosed a bug submitted by b'ihsinme' 
b'File System Monitoring Queue Overflow'

03 Dec 2021

b'Shopify' disclosed a bug submitted by b'hydraxanon82' 
b'Ability to add address without being an admin or staff in the store via wholesale store'

03 Dec 2021

b'Shopify' disclosed a bug submitted by b'j0j0' 
b'Unathorised access to admin endpoint on plus-website-staging5.shopifycloud.com'

03 Dec 2021

b'Slack' disclosed a bug submitted by b'oskarsv' 
b'Stored XSS in files.slack.com'

02 Dec 2021

b'Shopify' disclosed a bug submitted by b'cthulhufhtagn' 
b'Bypassing HTML filter in "Packing Slip Template" Lead to SSRF to Internal Kubernetes Endpoints'

02 Dec 2021

b'Glassdoor' disclosed a bug submitted by b'zonduu' 
b'CSS injection via link tag whitelisted-domain bypass - https://www.glassdoor.com'

02 Dec 2021

b'QIWI' disclosed a bug submitted by b'anonymouus' 
b'account takeover through password reset in url https://reklama.tochka.com/'

02 Dec 2021

b'Basecamp' disclosed a bug submitted by b'fuzzsqlb0f' 
b'Privilege Escalation leads to trash other users comment without having admin rights.'

01 Dec 2021

b'Mail.ru' disclosed a bug submitted by b'c1kada' 
b'Stored XSS on https://community.my.games/ (Add Post)'

01 Dec 2021

b'Azbuka Vkusa' disclosed a bug submitted by b'haxta4ok00' 
b'Reflected XSS in photogallery component on [https://market.av.ru]'

01 Dec 2021

b'VK.com' disclosed a bug submitted by b'executor' 
b' .....'

01 Dec 2021

b'VK.com' disclosed a bug submitted by b'executor' 
b' .'

01 Dec 2021

b'VK.com' disclosed a bug submitted by b'azimoff' 
b' / .'

01 Dec 2021

b'VK.com' disclosed a bug submitted by b'azimoff' 
b'XSS .'

01 Dec 2021

b'VK.com' disclosed a bug submitted by b'azimoff' 
b' (50x50) .'

01 Dec 2021

1 ... 136 137 138 139 140 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM