Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0x1int' 
b'Host Header Injection on https:////Account/ForgotPassword'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xd0ff9' 
b'Unauthenticated SQL Injection at [HtUS]'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sudi' 
b'.git folder exposed [HtUS]'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'shreky' 
b'Unauthenticated PII leak on verified/requested to be verified profiles on /app/org/{id}/profile/{id}/version/{id} [HtUS]'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ludv1k' 
b'Authentication bypass leads to Information Disclosure at U.S Air Force "https://"'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'720922' 
b'SSRF to read AWS metaData at https:/// [HtUS]'

14 Oct 2022

b'8x8' disclosed a bug submitted by b'testingforbugs' 
b'Subdomain Takeover at http://.get8x8.com/'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ibrahim0936356' 
b"Found Origin IP's Lead To Access "

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'g4mb4' 
b'Broken access discloses users and PII at https:// [HtUS]'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sudi' 
b'Local file read at https:/// [HtUS]'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jr0ch17' 
b'[hta3] Chain of ESI Injection & Reflected XSS leading to Account Takeover on []'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jr0ch17' 
b'[HTA2] Receiving access request on @wearehackerone.com email address'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0x1int' 
b'Blind SSRF via image upload URL downloader on https:/// '

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'snifyak' 
b'Account Takeover and Information update due to cross site request forgery via POST /registration/my-account.cfm'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0x1int' 
b'IDOR leaking PII data via VendorId parameter'

14 Oct 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nightm4re' 
b'Account takeover on [HtUS]'

14 Oct 2022

b'Shopify' disclosed a bug submitted by b'hazemhussien99' 
b'Self XSS in https://linkpop.com/dashboard/admin'

13 Oct 2022

b'Shopify' disclosed a bug submitted by b'jmp_35p' 
b'Staff can create workflows in Shopify Admin without apps permission'

13 Oct 2022

b'Shopify' disclosed a bug submitted by b'nagli' 
b'XSS seems to work again after change to linkpop at https://linkpop.com/testnaglinagli'

13 Oct 2022

b'Shopify' disclosed a bug submitted by b'kun_19' 
b'Cross-site scripting on api.collabs.shopify.com'

13 Oct 2022

1 ... 143 144 145 146 147 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM