Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'iamr0000t' 
b'PII data Leakage through hackerone reports '

09 Aug 2021

b'Acronis' disclosed a bug submitted by b'twvyy3vyaw8k' 
b'Local privilege escalation via insecure MSI file'

07 Aug 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Webauthn tokens are not removed on user deletion'

07 Aug 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Virtual Data Room / Hide download on collabora is easy to bypass'

07 Aug 2021

b'Kubernetes' disclosed a bug submitted by b'j0v' 
b'Loading YAML in Java client can lead to command execution'

07 Aug 2021

b'Mattermost' disclosed a bug submitted by b'shielder' 
b'Mattermost Server OAuth Flow Cross-Site Scripting'

06 Aug 2021

b'Uber' disclosed a bug submitted by b'0xprial' 
b'CVE-2020-3452 - unauthenticated file read on anyconnect.routematch.com'

05 Aug 2021

b'HackerOne' disclosed a bug submitted by b'tomvg' 
b'Partial report contents leakage - via HTTP/2 concurrent stream handling'

05 Aug 2021

b'HackerOne' disclosed a bug submitted by b'sunil_yedla' 
b'Private program disclosure through notifications'

05 Aug 2021

b'HackerOne' disclosed a bug submitted by b'frozensolid' 
b"Mishandling of hackerone clear background checks resulting in disclosure of other hacker's information"

05 Aug 2021

b'Acronis' disclosed a bug submitted by b'aapo' 
b'Acronis True Image (Windows) does not validate server certificate on a TLS connection'

05 Aug 2021

b'HackerOne' disclosed a bug submitted by b'none_of_the_above' 
b'Internal Gitlab Ticket Disclosure via External Slack Channels'

04 Aug 2021

b'Snapchat' disclosed a bug submitted by b'sicarius' 
b'Bypass Rate Limits on app.snapchat.com API Endpoint via X-Forwarded-For Header'

04 Aug 2021

b'MTN Group' disclosed a bug submitted by b'light4kira' 
b'Disclosure of internal information using hidden NTLM authentication leading to an exploit server'

04 Aug 2021

b'Slack' disclosed a bug submitted by b'shell_c0de' 
b'Private application files can be uploaded to Slack via malicious uploader'

04 Aug 2021

b'HackerOne' disclosed a bug submitted by b'brdoors3' 
b"Information disclosure - Feedback is accessible on Public profile even after 'disallowed' at https://hackerone.com/settings/feedback"

03 Aug 2021

b'Elastic' disclosed a bug submitted by b'superman85' 
b'[Swiftype] - Stored XSS via document field `url` triggers on `https://app.swiftype.com/engines/<engine>/document_types/<type>/documents/<id>`'

03 Aug 2021

b'Elastic' disclosed a bug submitted by b'superman85' 
b'Improper authorization on `/api/as/v1/credentials/` for Dev Role User with Limited Engine Access'

03 Aug 2021

b'Informatica' disclosed a bug submitted by b'montypythin' 
b'Improper Sanitization leads to XSS Fire on admin panel'

03 Aug 2021

b'GitHub Security Lab' disclosed a bug submitted by b'artem' 
b'Java: Unsafe deserialization with Jackson'

02 Aug 2021

1 ... 158 159 160 161 162 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM