Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'mattipv4' 
b'Sign in with Apple works on existing accounts, bypasses 2FA'

27 Jun 2022

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'sainaen' 
b'API docs expose an active token for the sample domain theburritobot.com'

27 Jun 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'windshock' 
b'Rails::Html::SafeListSanitizer vulnerable to xss attack in an environment that allows the style tag'

27 Jun 2022

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2022-32205: Set-Cookie denial of service'

27 Jun 2022

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2022-32206: HTTP compression denial of service'

27 Jun 2022

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2022-32207: Unpreserved file permissions'

27 Jun 2022

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2022-32208: FTP-KRB bad message verification'

27 Jun 2022

b'curl' disclosed a bug submitted by b'chen172' 
b'Credential leak when use two url'

27 Jun 2022

b'Phabricator' disclosed a bug submitted by b'foobar7' 
b'User can link non-public file attachments, leading to file disclose on edit by higher-privileged user'

26 Jun 2022

b'GitLab' disclosed a bug submitted by b'thypon' 
b'Bypass for Domain-level redirects (Unvalidated Redirects and Forwar)'

22 Jun 2022

b'Reddit' disclosed a bug submitted by b'bisesh' 
b'Able to approve admin approval and change effective status without adding payment details . '

22 Jun 2022

b'Alohi' disclosed a bug submitted by b'zeesozee' 
b'Weak rate limit for SIGN.PLUS email verification'

21 Jun 2022

b'Krisp' disclosed a bug submitted by b'yassineaboukir' 
b'Authentication CSRF resulting in unauthorized account access on Krisp app'

20 Jun 2022

b'Krisp' disclosed a bug submitted by b'life__001' 
b'Add more seats by paying less via PUT /v2/seats request manipulation'

20 Jun 2022

b'UPS VDP' disclosed a bug submitted by b'7odamo' 
b'Admin Authentication Bypass Lead to Admin Account Takeover '

20 Jun 2022

b'Enjin' disclosed a bug submitted by b'whiteshadow201' 
b'Authentication token and CSRF token bypass'

19 Jun 2022

b'Nextcloud' disclosed a bug submitted by b'michag86' 
b'bypass forced password protection via circles app'

19 Jun 2022

b'UPS VDP' disclosed a bug submitted by b'nayefhamouda' 
b'Broken access control '

18 Jun 2022

b'IBM' disclosed a bug submitted by b'exploitmsf' 
b'sql injection via https://setup.p2p.ihost.com/'

17 Jun 2022

b'Enjin' disclosed a bug submitted by b'er_salil' 
b'CSRF Bypassed on Logout Endpoint'

17 Jun 2022

1 ... 155 156 157 158 159 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM