Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Exodus' disclosed a bug submitted by b'bismillahfortuner' 
b'2 Cache Poisoning Attack Methods Affect Core Functionality www.exodus.com'

06 Jun 2022

b'U.S. General Services Administration' disclosed a bug submitted by b'rptl' 
b'Registered users contact information disclosure on salesforce lightning endpoint https://disposal.gsa.gov'

06 Jun 2022

b'curl' disclosed a bug submitted by b'nyymi' 
b'Heap overflow via HTTP/2 PUSH_PROMISE'

05 Jun 2022

b'curl' disclosed a bug submitted by b'nyymi' 
b'KRB-FTP: Security level downgrade'

05 Jun 2022

b'Kubernetes' disclosed a bug submitted by b'codermak' 
b'Github Account Takeover from Docs page of `kubernetes-csi.github.io`'

04 Jun 2022

b'Imgur' disclosed a bug submitted by b'mr_baka' 
b'8ybhy85kld9zp9xf84x6.imgur.com Subdomain Takeover'

03 Jun 2022

b'Kubernetes' disclosed a bug submitted by b't0rr3sp3dr0' 
b'AWS Load Balancer Controller Managed Security Groups can be replaced by an unprivileged attacker'

02 Jun 2022

b'Kubernetes' disclosed a bug submitted by b't0rr3sp3dr0' 
b'AWS Load Balancer Controller can be used by an attacker to modify rules of any Security Group that they are able to tag'

02 Jun 2022

b'Dropbox' disclosed a bug submitted by b'staz0t' 
b'Exfiltrate GDrive access token using CSRF'

01 Jun 2022

b'Nextcloud' disclosed a bug submitted by b'michag86' 
b'user can bypass password enforcement when federated sharing is enabled'

01 Jun 2022

b'Glovo' disclosed a bug submitted by b'omarelfarsaoui' 
b'Django debug enabled showing information about system, database, configuration files'

31 May 2022

b'Phabricator' disclosed a bug submitted by b'dyls' 
b'Deprecated owners.query API bypasses object view policy'

31 May 2022

b'Adobe' disclosed a bug submitted by b'saajanbhujel' 
b'Able to bypass the fix on DOM XSS at [www.adobe.com]'

31 May 2022

b'Adobe' disclosed a bug submitted by b'saajanbhujel' 
b'DOM XSS on www.adobe.com'

31 May 2022

b'Stripe' disclosed a bug submitted by b'rodolfomarianocy' 
b'CSRF token validation system is disabled on Stripe Dashboard'

31 May 2022

b'Nextcloud' disclosed a bug submitted by b'demonia' 
b'Improper input-size validation on the user new session name can result in server-side DDoS.'

31 May 2022

b'Vanilla' disclosed a bug submitted by b'mohit0786' 
b'BlIND XSS on https://open.vanillaforums.com'

31 May 2022

b'Acronis' disclosed a bug submitted by b'mega7' 
b'Self XSS in attachments name'

31 May 2022

b'Alohi' disclosed a bug submitted by b'darkknight4688' 
b'Users who are restricted to use the application because of a "Waiting List" are able to get access to the Beta Application by bypassing the waitlist'

30 May 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'piao' 
b'CVE-2022-28738: Double free in Regexp compilation'

28 May 2022

1 ... 163 164 165 166 167 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM