Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'TikTok' disclosed a bug submitted by b'daik0n' 
b'Subdomain Takeover via Unclaimed Amazon S3 Bucket (Musical.ly)'

07 Nov 2022

b'Flickr' disclosed a bug submitted by b'0xcyborg' 
b'Exceed photo dimensions, Flickr.com'

07 Nov 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'joshatmotion' 
b'I found another way to bypass Cloudflare Warp lock!'

07 Nov 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'joshatmotion' 
b'Bypass Cloudflare WARP lock on iOS.'

07 Nov 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'joshatmotion' 
b'Completely remove VPN profile from locked WARP iOS cient.'

07 Nov 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'haxatron1' 
b'CVE-2022-35252: control code in cookie denial of service'

05 Nov 2022

b'Acronis' disclosed a bug submitted by b'mr-medi' 
b'CSS Injection via Client Side Path Traversal + Open Redirect leads to personal data exfiltration on Acronis Cloud'

04 Nov 2022

b'GitLab' disclosed a bug submitted by b'legit-security' 
b'DOS via issue preview'

04 Nov 2022

b'GitLab' disclosed a bug submitted by b'otoyyy' 
b'Path paths and file disclosure vulnerabilities at influxdb.quality.gitlab.net'

04 Nov 2022

b'GitLab' disclosed a bug submitted by b'legit-security' 
b'DOS via move_issue'

04 Nov 2022

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'RepositoryPipeline allows importing of local git repos'

04 Nov 2022

b'GitHub' disclosed a bug submitted by b'jupenur' 
b'Command injection in GitHub Actions ContainerStepHost'

03 Nov 2022

b'Automattic' disclosed a bug submitted by b'apapedulimu' 
b'Archived / Deleted / Private Poll Can Be Viewed by Another Users [Crowdsignal WordPress plugins]'

03 Nov 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'kurohiro' 
b'CVE-2022-42916: HSTS bypass via IDN'

03 Nov 2022

b'Automattic' disclosed a bug submitted by b'bugra' 
b'Stored XSS in intensedebate.com via the Comments RSS '

02 Nov 2022

b'Automattic' disclosed a bug submitted by b'bugra' 
b'IDOR in API applications (able to see any API token, leads to account takeover)'

01 Nov 2022

b'Krisp' disclosed a bug submitted by b'n0_m3rcy' 
b'Authentication bypass for leads to take over any users account.'

31 Oct 2022

b'Linktree' disclosed a bug submitted by b'sudi' 
b'XSS in SocialIcon Link'

31 Oct 2022

b'MTN Group' disclosed a bug submitted by b'lu3ky-13' 
b'Cross-Site Request Forgery (CSRF) to xss'

30 Oct 2022

b'MTN Group' disclosed a bug submitted by b'lu3ky-13' 
b'Cross-site Scripting (XSS) - Reflected'

30 Oct 2022

1 ... 140 141 142 143 144 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM