Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Adobe' disclosed a bug submitted by b'letm3through' 
b'Disclosure of github access token in config file via nignx off-by-slash'

13 Jan 2022

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar' 
b'Reflected xss and open redirect on larksuite.com using /?back_uri= parameter.'

13 Jan 2022

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar' 
b"[IDOR] Modify other team's reminders via reminderId parameter"

13 Jan 2022

b'Zenly' disclosed a bug submitted by b'yetanotherhacker' 
b'Friend Request Flow Exposes User Data '

12 Jan 2022

b'Zenly' disclosed a bug submitted by b'yetanotherhacker' 
b'Account Takeover via SMS Authentication Flow '

12 Jan 2022

b'Nord Security' disclosed a bug submitted by b'paramdham' 
b'CSRF to change password'

12 Jan 2022

b'Gener8' disclosed a bug submitted by b'paramdham' 
b'Clickjacking to change email address'

12 Jan 2022

b'Node.js' disclosed a bug submitted by b'rugvip' 
b'Prototype pollution via console.table properties'

11 Jan 2022

b'Mail.ru' disclosed a bug submitted by b'kassem_s94' 
b'blog/wp-json/wp/v2/users FILE is enable it will used for bruteforce attack the admin panel at blog/wp-login.php'

09 Jan 2022

b'MariaDB' disclosed a bug submitted by b'realtess' 
b'Grafana LFI on https://grafana.mariadb.org'

06 Jan 2022

b'Twitter' disclosed a bug submitted by b'ian' 
b'Subdomain takeover of images.crossinstall.com'

05 Jan 2022

b'Mattermost' disclosed a bug submitted by b'at11zt00' 
b'ABLE TO TRICK THE VICTIM INTO USING A CRAFTED EMAIL ADDRESS FOR A PARTICULAR SESSION AND THEN LATER TAKE BACK THE ACCOUNT '

05 Jan 2022

b'8x8' disclosed a bug submitted by b'n1had' 
b'Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)'

05 Jan 2022

b'Nutanix' disclosed a bug submitted by b'kauenavarro' 
b'OPEN REDIRECT '

04 Jan 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'chamal' 
b'Buffer overflow in req_parsebody method in lua_request.c'

04 Jan 2022

b'Acronis' disclosed a bug submitted by b'plantos' 
b'%0A (New line) and limitness URL leads to DoS at all system [Main adress (https://www.acronis.com/)]'

04 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mr_x_strange' 
b'Log4Shell: RCE 0-day exploit on '

03 Jan 2022

b'Khan Academy' disclosed a bug submitted by b'hackthedevil' 
b'EMAIL SPOOFING'

02 Jan 2022

b'8x8' disclosed a bug submitted by b'sparroww' 
b'Default credentials lead to Spring Boot Admin dashboard access'

02 Jan 2022

b'LINE' disclosed a bug submitted by b'66ed3gs' 
b"Improper authorization allows disclosing users' notification data in Notification channel server"

31 Dec 2021

1 ... 158 159 160 161 162 ... 746

BY DENIS WERNER - @NOBBD - IMPRESSUM