Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar' 
b"Stored xss on helpdesk using user's city"

14 Jan 2022

b'IBM' disclosed a bug submitted by b'xyantix' 
b'SQL Injection and plaintext passwords via User Search'

14 Jan 2022

b'Django' disclosed a bug submitted by b'scaramouche31' 
b'Deserialization of potentially malicious data to RCE'

14 Jan 2022

b'Ruby' disclosed a bug submitted by b'sohaib619' 
b'Bug Report : [ No Valid SPF Records ]'

13 Jan 2022

b'Adobe' disclosed a bug submitted by b'ismailmuh' 
b'AEM forms XXE Vulnerability'

13 Jan 2022

b'Adobe' disclosed a bug submitted by b'letm3through' 
b'Disclosure of github access token in config file via nignx off-by-slash'

13 Jan 2022

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar' 
b'Reflected xss and open redirect on larksuite.com using /?back_uri= parameter.'

13 Jan 2022

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar' 
b"[IDOR] Modify other team's reminders via reminderId parameter"

13 Jan 2022

b'Zenly' disclosed a bug submitted by b'yetanotherhacker' 
b'Friend Request Flow Exposes User Data '

12 Jan 2022

b'Zenly' disclosed a bug submitted by b'yetanotherhacker' 
b'Account Takeover via SMS Authentication Flow '

12 Jan 2022

b'Nord Security' disclosed a bug submitted by b'paramdham' 
b'CSRF to change password'

12 Jan 2022

b'Gener8' disclosed a bug submitted by b'paramdham' 
b'Clickjacking to change email address'

12 Jan 2022

b'Node.js' disclosed a bug submitted by b'rugvip' 
b'Prototype pollution via console.table properties'

11 Jan 2022

b'Mail.ru' disclosed a bug submitted by b'kassem_s94' 
b'blog/wp-json/wp/v2/users FILE is enable it will used for bruteforce attack the admin panel at blog/wp-login.php'

09 Jan 2022

b'MariaDB' disclosed a bug submitted by b'realtess' 
b'Grafana LFI on https://grafana.mariadb.org'

06 Jan 2022

b'Twitter' disclosed a bug submitted by b'ian' 
b'Subdomain takeover of images.crossinstall.com'

05 Jan 2022

b'Mattermost' disclosed a bug submitted by b'at11zt00' 
b'ABLE TO TRICK THE VICTIM INTO USING A CRAFTED EMAIL ADDRESS FOR A PARTICULAR SESSION AND THEN LATER TAKE BACK THE ACCOUNT '

05 Jan 2022

b'8x8' disclosed a bug submitted by b'n1had' 
b'Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)'

05 Jan 2022

b'Nutanix' disclosed a bug submitted by b'kauenavarro' 
b'OPEN REDIRECT '

04 Jan 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'chamal' 
b'Buffer overflow in req_parsebody method in lua_request.c'

04 Jan 2022

1 ... 150 151 152 153 154 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM