Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Showmax' disclosed a bug submitted by b'qualin' 
b' Cross-origin resource sharing'

15 Feb 2022

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'When sharing a Deck card in conversation the metaData can be manipulated to open arbitrary URL'

15 Feb 2022

b'Shopify' disclosed a bug submitted by b'saurabhsankhwar3' 
b'Ability to Disable the Login Attempt of any Shopify Owner for 24 hrs (Zero_Click)'

15 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'shiar' 
b'Arbitrary File Read at via filename parameter'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'websecnl' 
b'Broken Authentication'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'websecnl' 
b'IDOR'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pll25' 
b'CUI Labelled document out in the open'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'dreyand72' 
b'EC2 subdomain takeover at http:///'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'rozerx00' 
b'XSS trigger via HTML Iframe injection in ( https:// ) due to unfiltered HTML tags'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pelegn' 
b'Reflected XSS at https:// via "" parameter'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pelegn' 
b'Reflected XSS at https:// via "" parameter'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pelegn' 
b'Reflected XSS at https:/// via "" parameter'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pelegn' 
b'Reflected XSS at https:/// via "" parameter'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pelegn' 
b'Reflected XSS at https:/// via "" parameter'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fiveguyslover' 
b'(CORS) Cross-origin resource sharing misconfiguration on https://'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pirateducky' 
b'default creds on https://'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'takester' 
b'Unauthorized access to PII leads to MASS account Takeover'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'iam_a_jinchuriki' 
b'RXSS ON https://'

14 Feb 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ghostxsec' 
b'[CVE-2020-3452] Unauthenticated file read in Cisco ASA'

14 Feb 2022

b'UPchieve' disclosed a bug submitted by b'zeyu2001' 
b'Widespread CSRF on authenticated POST endpoints'

13 Feb 2022

1 ... 152 153 154 155 156 ... 746

BY DENIS WERNER - @NOBBD - IMPRESSUM