Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Reddit' disclosed a bug submitted by b'kratul' 
b'Open Redirect through POST Request in www.redditinc.com'

08 Jul 2022

b'Glovo' disclosed a bug submitted by b'mehdisadir' 
b'Exposed valid AWS, Mysql, Sendgrid and other secrets'

08 Jul 2022

b'TikTok' disclosed a bug submitted by b'rioncool22' 
b'Clickjacking Vulnerability In Whole Page Ads Tiktok'

07 Jul 2022

b'Node.js' disclosed a bug submitted by b'zeyu2001' 
b'HTTP Request Smuggling Due to Flawed Parsing of Transfer-Encoding '

07 Jul 2022

b'Node.js' disclosed a bug submitted by b'zeyu2001' 
b'HTTP Request Smuggling Due To Improper Delimiting of Header Fields'

07 Jul 2022

b'Node.js' disclosed a bug submitted by b'zeyu2001' 
b'HTTP Request Smuggling Due to Incorrect Parsing of Multi-line Transfer-Encoding'

07 Jul 2022

b'Omise' disclosed a bug submitted by b'sachinrajput' 
b'Brute force of a current password on a disable 2fa leads to guess password and disable 2fa.'

07 Jul 2022

b'Hyperledger' disclosed a bug submitted by b'fatal0' 
b'Remote denial of service in HyperLedger Fabric'

07 Jul 2022

b'SKALE Network' disclosed a bug submitted by b'voiddy' 
b'Stack Buffer Overflow via `gmp_sprintf`in `BLSSignature` and `BLSSigShare`'

07 Jul 2022

b'Open-Xchange' disclosed a bug submitted by b'julezman' 
b'Privilege escalation possible in dovecot when similar passdbs are used'

06 Jul 2022

b'Nextcloud' disclosed a bug submitted by b'kesselb' 
b'Ownership check missing when updating or deleting attachments'

06 Jul 2022

b'Sony' disclosed a bug submitted by b'echidonut' 
b'Blind User-Agent SQL Injection to Blind Remote OS Command Execution at '

06 Jul 2022

b'Slack' disclosed a bug submitted by b'ziot' 
b'SSRF via Office file thumbnails'

05 Jul 2022

b'GitLab' disclosed a bug submitted by b'ledz1996' 
b'Exposure of a valid Gitlab-Workhorse JWT leading to various bad things'

05 Jul 2022

b'New Relic' disclosed a bug submitted by b'sairanga' 
b' Reflected Cross site Scripting (XSS) on https://one.newrelic.com'

05 Jul 2022

b'UPS VDP' disclosed a bug submitted by b'3amoura' 
b'Reflected XSS on https://wwwapps.ups.com/ctc/request?loc='

05 Jul 2022

b'Nextcloud' disclosed a bug submitted by b'spaceraccoon' 
b'SMTP Command Injection in iCalendar Attachments to Emails via Newlines'

04 Jul 2022

b'Reddit' disclosed a bug submitted by b'zqyzoid' 
b'Moderators can send messages to users from banned subreddits via `oauth.reddit.com/api/mod/conversations`'

04 Jul 2022

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Federated editing allows iframing possibly malicious remotes'

02 Jul 2022

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'June 2022 Incident Report'

01 Jul 2022

1 ... 158 159 160 161 162 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM