Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'MTN Group' disclosed a bug submitted by b'zero_or_1' 
b'information discloure via logs files at ==> https://ihelp.mtnbusiness.com/logfiles/Log_21-06-2021.txt'

20 Aug 2021

b'GitLab' disclosed a bug submitted by b'retroplasma' 
b'When you call your branch the same name as a git hash, it could be checked out by dependents'

19 Aug 2021

b'MTN Group' disclosed a bug submitted by b'0x0luke' 
b'2x Remote file inclusion within your VMware Instances'

19 Aug 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xelkot' 
b'XSS on '

19 Aug 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera' 
b'CUI labled and and Restricted intelligence '

19 Aug 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fdeleite' 
b'XSS due to CVE-2020-3580 [.mil]'

19 Aug 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fdeleite' 
b'S3 bucket listing/download'

19 Aug 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'whoisbinit' 
b'[CVE-2021-29156 on ForgeRock OpenAm] LDAP Injection in Webfinger Protocol!'

19 Aug 2021

b'MTN Group' disclosed a bug submitted by b'ibrahimauwal__' 
b'Email verification bypassed during sing up (https://developers.mtn.com/profile)'

19 Aug 2021

b'Glassdoor' disclosed a bug submitted by b'vestige23' 
b'Reflected XSS on https://www.glassdoor.com/job-listing/spotlight'

19 Aug 2021

b'GitLab' disclosed a bug submitted by b'vovohelo' 
b'Clipboard DOM-based XSS'

19 Aug 2021

b'Affirm' disclosed a bug submitted by b'ian' 
b'Subdomain takeover of www.affirm.com'

18 Aug 2021

b'UPchieve' disclosed a bug submitted by b'4pag' 
b'i can join without user and pass in this website https://argocd.upchieve.org/settings/accounts'

18 Aug 2021

b'MTN Group' disclosed a bug submitted by b'devhug' 
b'CVE-2018-6389 exploitation - using scripts loader'

18 Aug 2021

b'R3' disclosed a bug submitted by b'aliyugombe' 
b'No DMARC record at cordacon.com'

18 Aug 2021

b'Glovo' disclosed a bug submitted by b'celesian' 
b'Reflected XSS on delivery.glovoapp.com'

18 Aug 2021

b'Acronis' disclosed a bug submitted by b'vovohelo' 
b'Possible LDAP username and password disclosed on Github'

17 Aug 2021

b'Acronis' disclosed a bug submitted by b'amsda' 
b'[acronis.secure.force.com] - Insecure Salesforce default/custom object permissions leads to information disclosure'

17 Aug 2021

b'Mail.ru' disclosed a bug submitted by b'savproga' 
b'Blind XSS Stored and CORS misconfiguration "" top.mail.ru'

17 Aug 2021

b'MTN Group' disclosed a bug submitted by b'aliyugombe' 
b'No rate limit in otp code sending'

16 Aug 2021

1 ... 155 156 157 158 159 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM