Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Khan Academy' disclosed a bug submitted by b'nightmare_msf' 
b'Access to alerta.khanacademy.org leak sensitive data '

08 Sep 2021

b'QIWI' disclosed a bug submitted by b'uddeshaya001' 
b'Subdomain Takeover on 1c-start.tochka.com pointing to unbouncepages'

07 Sep 2021

b'Zomato' disclosed a bug submitted by b'haxor5392' 
b'HTML injection leads to reflected XSS'

07 Sep 2021

b'Zomato' disclosed a bug submitted by b'mr_edwards' 
b'HTML Injection @ /[restaurant]/order endpoint.'

07 Sep 2021

b'Open-Xchange' disclosed a bug submitted by b'northsea' 
b'Path Traversal in dict-fs and no-check Escape Character in oauth2-jwt'

07 Sep 2021

b'Mail.ru' disclosed a bug submitted by b'nanwn' 
b'subdomain takeover disney.samokat.ru'

07 Sep 2021

b'Sifchain' disclosed a bug submitted by b'sathish87' 
b'Bootstrap library is vulnerable'

06 Sep 2021

b'Mail.ru' disclosed a bug submitted by b'nightmare_msf' 
b'Social Oauth Disconnect CSRF at znakcup.ru'

06 Sep 2021

b'Mail.ru' disclosed a bug submitted by b'nightmare_msf' 
b'XSS on ub.icq.net'

06 Sep 2021

b'Kubernetes' disclosed a bug submitted by b'howardjohn' 
b'Holes in EndpointSlice Validation Enable Host Network Hijack'

05 Sep 2021

b'Kubernetes' disclosed a bug submitted by b'ariellima' 
b'Node Validation Admission does not observe all oldObject fields'

05 Sep 2021

b'Mail.ru' disclosed a bug submitted by b'yukusawa18' 
b'informations disclosure(Email,Numbers,Agreements, admin Sessions and more ...) through a PostgreSQL database belongs to (legium-back.corp.mail.ru)'

05 Sep 2021

b'Mail.ru' disclosed a bug submitted by b'lobity' 
b' [city-mobil.ru/taxiserv/]'

05 Sep 2021

b'Acronis' disclosed a bug submitted by b'dj4ng0d2' 
b'XSS Stored in Cacheable response'

05 Sep 2021

b'OpenMage' disclosed a bug submitted by b'thecyberjerry' 
b'No Limit on Email Subscription'

04 Sep 2021

b'Uber' disclosed a bug submitted by b'batman9' 
b'Google Maps API Key Leakage'

03 Sep 2021

b'Courier' disclosed a bug submitted by b'bugera' 
b'Possible to invite any team member without being logged in. [ Session Management Issue ]'

03 Sep 2021

b'Upserve ' disclosed a bug submitted by b'ctulhu' 
b'Payment method token being sent to 3rd party analytics service'

03 Sep 2021

b'ownCloud' disclosed a bug submitted by b'pabl00nicarres' 
b'Protocol Smuggling over LDAP password field'

03 Sep 2021

b'Snapchat' disclosed a bug submitted by b'korniltsev' 
b'Improper Authentication - any user can login as other user with otp/logout & otp/login'

03 Sep 2021

1 ... 151 152 153 154 155 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM