Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'savproga' 
b'Blind XSS Stored and CORS misconfiguration "" top.mail.ru'

17 Aug 2021

b'MTN Group' disclosed a bug submitted by b'aliyugombe' 
b'No rate limit in otp code sending'

16 Aug 2021

b'MTN Group' disclosed a bug submitted by b'aliyugombe' 
b'No rate limit lead to otp brute forcing'

16 Aug 2021

b'Elastic' disclosed a bug submitted by b's1r1u5' 
b'Prototype Pollution leads to XSS on https://blog.swiftype.com/#__proto__[asd]=alert(document.domain)'

16 Aug 2021

b'Brave Software' disclosed a bug submitted by b'sickcodes' 
b'Brave Browser permanently timestamps & logs connection times for all v2 domains ~/.config/BraveSoftware/Brave-Browser/tor/data/tor.log'

16 Aug 2021

b'Kartpay' disclosed a bug submitted by b'bugera' 
b'Full Path Disclosure of Server through 500 Server Error'

16 Aug 2021

b'UPchieve' disclosed a bug submitted by b'scianto05' 
b'CLICKJACKING LEADS TO DEACTIVATE ACCOUNT'

16 Aug 2021

b'Shopify' disclosed a bug submitted by b'riramar' 
b'Improper Input Validation on https://oberlo-image-proxy.shopifycloud.com/'

16 Aug 2021

b'Acronis' disclosed a bug submitted by b'bourbon' 
b'SQL Injection in agent-manager'

16 Aug 2021

b'Rockstar Games' disclosed a bug submitted by b'ivanglinkin' 
b'Brute Force against VMware Horizon'

16 Aug 2021

b'Mail.ru' disclosed a bug submitted by b'abosala7' 
b'Subdomain takeover on "info-edcrunch.skillfactory.ru" '

15 Aug 2021

b'The Internet' disclosed a bug submitted by b'yannayl' 
b'IP-in-IP protocol routes arbitrary traffic by default - CVE-2020-10136'

15 Aug 2021

b'MTN Group' disclosed a bug submitted by b'lu3ky-13' 
b'Reflected XSS on play.mtn.co.za'

14 Aug 2021

b'MTN Group' disclosed a bug submitted by b'lu3ky-13' 
b'Blind SQL Injection '

14 Aug 2021

b'TikTok' disclosed a bug submitted by b'nanwn' 
b'Information Disclosure on TikTok Unplugged Site'

13 Aug 2021

b'Basecamp' disclosed a bug submitted by b'mrmax4o4' 
b'Domain Takeover [3737signals.com]'

13 Aug 2021

b'Mail.ru' disclosed a bug submitted by b'cutoffurmind' 
b'mailer.i.bizml.ru viber service preprod information disclosure'

13 Aug 2021

b'Mail.ru' disclosed a bug submitted by b'cutoffurmind' 
b'uchi.ru check_lessons Blind SQL Injection'

13 Aug 2021

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[http://kiwi.youdrive.today/] Information disclosure via Kiwi TCMS vulnerability'

13 Aug 2021

b'Uber' disclosed a bug submitted by b'pmnh' 
b"Chain of vulnerabilities in Uber for Business Vouchers program allows for attacker to perform arbitrary charges to victim's U4B payment account"

12 Aug 2021

1 ... 156 157 158 159 160 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM