Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'R3' disclosed a bug submitted by b'aliyugombe' 
b'No DMARC record at cordacon.com'

18 Aug 2021

b'Glovo' disclosed a bug submitted by b'celesian' 
b'Reflected XSS on delivery.glovoapp.com'

18 Aug 2021

b'Acronis' disclosed a bug submitted by b'vovohelo' 
b'Possible LDAP username and password disclosed on Github'

17 Aug 2021

b'Acronis' disclosed a bug submitted by b'amsda' 
b'[acronis.secure.force.com] - Insecure Salesforce default/custom object permissions leads to information disclosure'

17 Aug 2021

b'Mail.ru' disclosed a bug submitted by b'savproga' 
b'Blind XSS Stored and CORS misconfiguration "" top.mail.ru'

17 Aug 2021

b'MTN Group' disclosed a bug submitted by b'aliyugombe' 
b'No rate limit in otp code sending'

16 Aug 2021

b'MTN Group' disclosed a bug submitted by b'aliyugombe' 
b'No rate limit lead to otp brute forcing'

16 Aug 2021

b'Elastic' disclosed a bug submitted by b's1r1u5' 
b'Prototype Pollution leads to XSS on https://blog.swiftype.com/#__proto__[asd]=alert(document.domain)'

16 Aug 2021

b'Brave Software' disclosed a bug submitted by b'sickcodes' 
b'Brave Browser permanently timestamps & logs connection times for all v2 domains ~/.config/BraveSoftware/Brave-Browser/tor/data/tor.log'

16 Aug 2021

b'Kartpay' disclosed a bug submitted by b'bugera' 
b'Full Path Disclosure of Server through 500 Server Error'

16 Aug 2021

b'UPchieve' disclosed a bug submitted by b'scianto05' 
b'CLICKJACKING LEADS TO DEACTIVATE ACCOUNT'

16 Aug 2021

b'Shopify' disclosed a bug submitted by b'riramar' 
b'Improper Input Validation on https://oberlo-image-proxy.shopifycloud.com/'

16 Aug 2021

b'Acronis' disclosed a bug submitted by b'bourbon' 
b'SQL Injection in agent-manager'

16 Aug 2021

b'Rockstar Games' disclosed a bug submitted by b'ivanglinkin' 
b'Brute Force against VMware Horizon'

16 Aug 2021

b'Mail.ru' disclosed a bug submitted by b'abosala7' 
b'Subdomain takeover on "info-edcrunch.skillfactory.ru" '

15 Aug 2021

b'The Internet' disclosed a bug submitted by b'yannayl' 
b'IP-in-IP protocol routes arbitrary traffic by default - CVE-2020-10136'

15 Aug 2021

b'MTN Group' disclosed a bug submitted by b'lu3ky-13' 
b'Reflected XSS on play.mtn.co.za'

14 Aug 2021

b'MTN Group' disclosed a bug submitted by b'lu3ky-13' 
b'Blind SQL Injection '

14 Aug 2021

b'TikTok' disclosed a bug submitted by b'nanwn' 
b'Information Disclosure on TikTok Unplugged Site'

13 Aug 2021

b'Basecamp' disclosed a bug submitted by b'mrmax4o4' 
b'Domain Takeover [3737signals.com]'

13 Aug 2021

1 ... 168 169 170 171 172 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM