Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Reddit' disclosed a bug submitted by b'high_ping_ninja' 
b'Getting access of mod logs from any public or restricted subreddit with IDOR vulnerability'

04 Aug 2022

b'Automattic' disclosed a bug submitted by b'ghimire_veshraj' 
b'Unauthenticated Private Messages DIsclosure via wordpress Rest API'

04 Aug 2022

b'Automattic' disclosed a bug submitted by b'ghimire_veshraj' 
b'Sensei LMS IDOR to send message'

04 Aug 2022

b'TikTok' disclosed a bug submitted by b'mrzheev' 
b'Unrestricted File Upload Blind Stored Xss in subdomain ads.tiktok.com'

04 Aug 2022

b'Reddit' disclosed a bug submitted by b'keer0k' 
b'XSS in redditmedia.com can compromise data of reddit.com'

03 Aug 2022

b'Reddit' disclosed a bug submitted by b'fransrosen' 
b'One-click account hijack for anyone using Apple sign-in with Reddit, due to response-type switch + leaking href to XSS on www.redditmedia.com'

02 Aug 2022

b'GitLab' disclosed a bug submitted by b'm-narayanan' 
b"Found Origin IP's lead to access to gitlab"

02 Aug 2022

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram' 
b'Insecure TLS Configuration #3530'

01 Aug 2022

b'Showmax' disclosed a bug submitted by b'qualwin38000' 
b'delete the subaccount from the user id'

01 Aug 2022

b'Rocket.Chat' disclosed a bug submitted by b'baltpeter' 
b'Insecure use of shell.openExternal() in Rocket.Chat Desktop App leading to RCE'

01 Aug 2022

b'Judge.me ' disclosed a bug submitted by b'netboom' 
b'Race condition on https://judge.me/people'

01 Aug 2022

b'GoCD' disclosed a bug submitted by b'khalidou' 
b'Open S3 Bucket Accessible by any Aws User'

31 Jul 2022

b'Hyperledger' disclosed a bug submitted by b'bhaskar_ram' 
b'Corsa Site Scripting Vulnerability (XSS)'

30 Jul 2022

b'MTN Group' disclosed a bug submitted by b'vulnera' 
b'Open redirection at https://smartreports.mtncameroon.net'

30 Jul 2022

b'Phabricator' disclosed a bug submitted by b'dyls' 
b'Possible to make restricted files public on Phabricator via Diffusion'

29 Jul 2022

b'Dropbox' disclosed a bug submitted by b'sayaanalam' 
b"Send Fax from Anyone's HelloFax Account Due to Misconfigured Email Validation"

29 Jul 2022

b'Nextcloud' disclosed a bug submitted by b'ro0telqayser' 
b'@nextcloud/logger NPM package brings vulnerable ansi-regex version'

29 Jul 2022

b'TikTok' disclosed a bug submitted by b'lu3ky-13' 
b'HTML Injection via TikTok Ads Email Share '

28 Jul 2022

b'Panther Labs' disclosed a bug submitted by b'prakash142' 
b'Twitter Account hijack through broken link in https://runpanther.io'

28 Jul 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'albertspedersen' 
b'Hijack all emails sent to any domain that uses Cloudflare Email Forwarding'

28 Jul 2022

1 ... 154 155 156 157 158 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM