Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar' 
b'Non privileged user is able to approve his own app himself leading to mass privilege escalations.'

20 Nov 2021

b'Internet Bug Bounty' disclosed a bug submitted by b'itsecurityco' 
b'Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.50'

19 Nov 2021

b'Azbuka Vkusa' disclosed a bug submitted by b'ronr' 
b'Reflected XSS on av.ru via `q` parameter at https://av.ru/collections/*'

19 Nov 2021

b'UPchieve' disclosed a bug submitted by b'maisanisnotyours' 
b'Clickjacking ar https://hackers.upchieve.org/login'

19 Nov 2021

b'Internet Bug Bounty' disclosed a bug submitted by b'svalkanov' 
b'Ruby - Regular Expression Denial of Service Vulnerability of Date Parsing Methods'

19 Nov 2021

b'Internet Bug Bounty' disclosed a bug submitted by b'fms' 
b'Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (CVE-2021-42013)'

19 Nov 2021

b'Shopify' disclosed a bug submitted by b'savik' 
b'Apache Flink Dashboard exposure at https://streaming-sales-model-production.flink.shopifykloud.com'

18 Nov 2021

b'Internet Bug Bounty' disclosed a bug submitted by b'mshtawythug' 
b'The Host Authorization middleware in Action Pack is vulnerable to crafted X-Forwarded-Host values'

18 Nov 2021

b'Shopify' disclosed a bug submitted by b'beerboy_ankit' 
b'Open Redirect in www.shopify.dev Environment '

18 Nov 2021

b'Judge.me ' disclosed a bug submitted by b'rioncool22' 
b'Stored XSS in Email Templates via link'

18 Nov 2021

b'GitLab' disclosed a bug submitted by b'misha98857' 
b'Stored XSS via Mermaid Prototype Pollution vulnerability'

18 Nov 2021

b'TikTok' disclosed a bug submitted by b'boynamedboy' 
b'BYPASSING COMMENTING ON RESTRICTED AUDIENCE VIDEOS'

18 Nov 2021

b'Rockstar Games' disclosed a bug submitted by b'sn0wd3n' 
b'Social Club Account Takeover Via RGL And Steam/Epic Linked Account'

17 Nov 2021

b'Acronis' disclosed a bug submitted by b'darkdream' 
b'Cross Site Scripting (Reflected) on https://www.acronis.cz/'

17 Nov 2021

b'Acronis' disclosed a bug submitted by b'riramar' 
b'HTTP Request Smuggling on https://consumer.acronis.com'

16 Nov 2021

b'Acronis' disclosed a bug submitted by b'riramar' 
b'HTTP Request Smuggling on https://promosandbox.acronis.com'

16 Nov 2021

b'Azbuka Vkusa' disclosed a bug submitted by b'kerbyj' 
b' Cisco Smart Install'

16 Nov 2021

b'Glovo' disclosed a bug submitted by b'spaceboy20' 
b'chainning bugs to get full disclosure of Users addresses '

16 Nov 2021

b'Elastic' disclosed a bug submitted by b'dee-see' 
b'Fix for CVE-2021-22151 (Kibana path traversal issue) can be bypassed on Windows'

15 Nov 2021

b'Azbuka Vkusa' disclosed a bug submitted by b'adsec2s' 
b'Leak of Google Sheets API credentials'

15 Nov 2021

1 ... 150 151 152 153 154 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM