Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'IBM' disclosed a bug submitted by b'un_kn0wn' 
b'Unauthorized Kubernetes to RCE (root) and found TEAMTNT Crypto Miner on it'

18 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xelkomy' 
b'phpinfo() disclosure info'

18 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xelkomy' 
b'Reflected Xss https:///'

18 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xelkomy' 
b'RXSS Via URI Path - https:///'

18 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xelkomy' 
b'RXSS - https:///'

18 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xelkomy' 
b'RXSS - '

18 Oct 2021

b'GitLab' disclosed a bug submitted by b'saleemrashid' 
b'Stored XSS in Mermaid when viewing Markdown files'

18 Oct 2021

b'GitLab' disclosed a bug submitted by b'maruthi12' 
b'Reporters can upload design to issues using the "Move to" feature'

18 Oct 2021

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'Stored XSS in markdown via the DesignReferenceFilter '

18 Oct 2021

b'Concrete CMS' disclosed a bug submitted by b'd3addog' 
b'Stored unauth XSS in calendar event via CSRF'

15 Oct 2021

b'Concrete CMS' disclosed a bug submitted by b'd3addog' 
b'Authenticated path traversal to RCE'

15 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mrempy' 
b'DoD internal documents are leaked to the public'

15 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fdeleite' 
b'Subdomain takeover []'

13 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'brumens' 
b'Cache Posioning leading to denial of service at `` - Bypass fix from report #1198434\t'

13 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'POST based RXSS on https:/// via parameter'

13 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'letfornz' 
b'Path traversal on []'

13 Oct 2021

b'WakaTime' disclosed a bug submitted by b'mr_n0b3dy' 
b'HTML - injection '

12 Oct 2021

b'Mail.ru' disclosed a bug submitted by b'melbadry9' 
b'Open Redirect and CRLF Injection Leads to XSS on [app.doma.uchi.ru]'

12 Oct 2021

b'Acronis' disclosed a bug submitted by b'doosec101' 
b'Subdomain takeover of main domain of https://www.cyberlynx.lu/'

12 Oct 2021

b'Monero' disclosed a bug submitted by b'minerscan' 
b'Array Index Underflow--http rpc'

11 Oct 2021

1 ... 165 166 167 168 169 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM