Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zomato' disclosed a bug submitted by b'ian' 
b'Subdomain takeover of fr1.vpn.zomans.com'

17 Sep 2021

b'Mattermost' disclosed a bug submitted by b'akashhamal0x01' 
b'Account takeover due to misconfiguration'

17 Sep 2021

b'Topcoder' disclosed a bug submitted by b'3viltwin' 
b'SSRF to AWS file read'

16 Sep 2021

b'Courier' disclosed a bug submitted by b'bugera' 
b'Session Fixiation allow attacker to create new evil workspace without being logged in [ Insecure Session management ]'

16 Sep 2021

b'Courier' disclosed a bug submitted by b'bugera' 
b'[3] Bypassing IP Based Rate Limit Blocking leads to rate limit bypass in Courier Login Panel'

16 Sep 2021

b'Zivver' disclosed a bug submitted by b'dhirenkumar8280' 
b'Bypassing Rate limit for forgot password by using different ip addresses'

15 Sep 2021

b'curl' disclosed a bug submitted by b'z2_' 
b'CVE-2021-22945: UAF and double-free in MQTT sending'

15 Sep 2021

b'GitLab' disclosed a bug submitted by b'joaxcar' 
b'Stored XSS in main page of a project caused by arbitrary script payload in group "Default initial branch name"'

15 Sep 2021

b'Revive Adserver' disclosed a bug submitted by b'418sec' 
b'Use of a Broken or Risky Cryptographic Algorithm'

15 Sep 2021

b'LINE' disclosed a bug submitted by b'reinforchu' 
b'Webview address bar spoofing in LINE client for iOS'

15 Sep 2021

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-079: Query to detect XSS with JavaServer Faces (JSF)'

15 Sep 2021

b'Flickr' disclosed a bug submitted by b'asad0x01_' 
b'CSRF in Account Deletion feature (https://www.flickr.com/account/delete)'

14 Sep 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java]: Add XXE sinks'

14 Sep 2021

b'Valve' disclosed a bug submitted by b'slidybat' 
b'Buffer overrun in Steam SILK voice decoder'

13 Sep 2021

b'PortSwigger Web Security' disclosed a bug submitted by b'thespiritman' 
b'No Rate Limit On Regenerate Password on Portswigger'

13 Sep 2021

b'Mattermost' disclosed a bug submitted by b'fuzzsqlb0f' 
b'Privilege Escalation leading to post in channel without having privilege'

13 Sep 2021

b'Monero' disclosed a bug submitted by b'thecharlatan' 
b'Unix time unlock_time values have dangerous validation rules enabling a number of exploits'

12 Sep 2021

b'Monero' disclosed a bug submitted by b'thecharlatan' 
b'Hardware Wallets Do Not Check Unlock TIme'

12 Sep 2021

b'Shopify' disclosed a bug submitted by b'jmp_35p' 
b'Create free Shopify application credits.'

10 Sep 2021

b'Node.js' disclosed a bug submitted by b'pimterry' 
b'Built-in TLS module unexpectedly treats "rejectUnauthorized: undefined" as "rejectUnauthorized: false", disabling all certificate validation'

10 Sep 2021

1 ... 149 150 151 152 153 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM