Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Reddit' disclosed a bug submitted by b'kedibeauty' 
b'Broken Authendication And Session Management'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'hasnain_123' 
b'Vulnerability Name: URL Redirection / Unvalidate Open Redirect'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'ravitejag' 
b'User Account has been taken out'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'himan253' 
b'critical file found etc/passwd on www.reddit.com'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'shylo' 
b' XSS'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'shylo' 
b'Oauth Misconfiguration Lead To Account Takeover'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'faberge' 
b'Domain Takeover of Reddit.ru via DNS Hijacking'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'bhatiagaurav1211' 
b'No Rate Limit on redditgifts gift when Adding Comment'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'manish_prajapat' 
b"Email Verification Bypass And Get access to user's private invitation."

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'c_j_27' 
b'No Password Length Restriction leads to Denial of Service'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'parasimpaticki' 
b'Deleting all DMs on RedditGifts.com'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'yanouhd' 
b'IDOR to pay less for coin purchases on oauth.reddit.com via /api/v2/gold/paypal/create_coin_purchase_order in `order_id` parameter '

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'sandeep_rj49' 
b'[dubmash] Lack of authorization checks - Update Sound Titles'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'abdallah1911' 
b'Content Spoofing'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'bhatiagaurav1211' 
b's3 bucket takeover presented in https://github.com/reddit/rpan-studio/blob/e1782332c75ecb2f774343258ff509788feab7ce/CI/full-build-macos.sh'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'falcon_319' 
b'hardcoded api secret & api key in com.reddit.frontpage'

21 Oct 2021

b'Shopify' disclosed a bug submitted by b'golim' 
b'Shopify.com Web Cache Deception vulnerability leads to personal information and CSRF tokens leakage'

21 Oct 2021

b'Shopify' disclosed a bug submitted by b'fr4via' 
b'Store Deletion or Sell without authentication'

21 Oct 2021

b'Shopify' disclosed a bug submitted by b'm7mdharoun' 
b'Domain Takeover at 3hopify.media'

21 Oct 2021

b'Reddit' disclosed a bug submitted by b'nicolaas' 
b'Hash-Collision Denial-of-Service Vulnerability in Markdown Parser'

21 Oct 2021

1 ... 167 168 169 170 171 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM