Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2021-22922: Wrong content via metalink not discarded'

21 Jul 2021

b'Ian Dunn' disclosed a bug submitted by b'praalsanthpro' 
b'Multiple server ssh usernames leaked in your github repository'

19 Jul 2021

b'GitLab' disclosed a bug submitted by b'tester12rtg' 
b'Stored-XSS in merge requests'

19 Jul 2021

b'Acronis' disclosed a bug submitted by b'samincube' 
b'Reflected XSS via "Error" parameter on https://admin.acronis.com/admin/su/'

19 Jul 2021

b'GitLab' disclosed a bug submitted by b'ooooooo_q' 
b'Stored XSS in custom emoji'

19 Jul 2021

b'Ruby' disclosed a bug submitted by b'chinarulezzz' 
b"OS Command Injection in '/lib/un.rb -- Utilities to replace common UNIX commands in Makefiles etc'"

19 Jul 2021

b'Basecamp' disclosed a bug submitted by b'alone_breecher' 
b'Information Disclosure .htaccess accesible for public'

18 Jul 2021

b'Nextcloud' disclosed a bug submitted by b'wester0x01' 
b'Leak arbitrary file under nextcloud android client privacy directory'

17 Jul 2021

b'GitHub Security Lab' disclosed a bug submitted by b'logicmap' 
b'[go]: Add query for detecting CORS misconfiguration'

16 Jul 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Ransomware protection is missing extentions take 2'

16 Jul 2021

b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j' 
b'[Java] CWE-918: Added URLClassLoader and WebClient SSRF sinks'

15 Jul 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java]: CWE 295 - Insecure TrustManager - MiTM'

15 Jul 2021

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun' 
b'[Java] JShell Injection'

15 Jul 2021

b'GitHub Security Lab' disclosed a bug submitted by b'timolesml' 
b'[Java]: CWE-665 Insecure environment during RMI/JMX Server initialisation - All for one bounty'

15 Jul 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java]: CWE 295 - Insecure TrustManager - MiTM'

15 Jul 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Admin audit is not properly logging unsetting of expiration date'

15 Jul 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'User deletion is not handled properly everywhere'

15 Jul 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Scoped apptokens can be changed by that very apptoken'

15 Jul 2021

b'Basecamp' disclosed a bug submitted by b'princej_76' 
b'Error Page Content Spoofing or Text Injection '

14 Jul 2021

b'Twitter' disclosed a bug submitted by b'jaka_tingkir' 
b'[Bypass fixed #664038 and #519059] Application settings change settings that have been set by the user'

13 Jul 2021

1 ... 162 163 164 165 166 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM