Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'k0x' 
b'SQL Injection'

25 Oct 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'exploitmsf' 
b'CVE-2020-7961 RCE Liferay Portal Unauthenticated via https:///'

25 Oct 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'badlifeguard' 
b'Pull Any Automated Record Brief'

25 Oct 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'badlifeguard' 
b' SSN/EDPI'

25 Oct 2024

b'Hyperledger' disclosed a bug submitted by b'hackergandhi' 
b'Memory Leak in bytes_to_hexstring Function'

24 Oct 2024

b'AWS VDP' disclosed a bug submitted by b'necr0mancer' 
b'Information Disclosure Due To exposed .env file (Directory Listing) at '

22 Oct 2024

b'Endless Group' disclosed a bug submitted by b'seqode' 
b'Weak Password Policy via DirectAdmin Password Change Functionality'

22 Oct 2024

b'MTN Group' disclosed a bug submitted by b'mathara' 
b'Reflected - XSS'

21 Oct 2024

b'MTN Group' disclosed a bug submitted by b'mathara' 
b'No rate limit in OTP code sending'

21 Oct 2024

b'WordPress' disclosed a bug submitted by b'wshadow' 
b'Unauthenticated WordPress Database Repair DoS'

18 Oct 2024

b'Mozilla' disclosed a bug submitted by b'ghaazy' 
b'sentry Auth Token exposed publicly in docker hub image '

18 Oct 2024

b'Mozilla' disclosed a bug submitted by b'ghaazy' 
b'paypal cleient_id And stripe api key indexed on web arcive'

18 Oct 2024

b'Mozilla' disclosed a bug submitted by b'sushantd19' 
b'Race condition leads to add more than 5 email at Data breaches monitor system at https://stage.firefoxmonitor.nonprod.cloudops.mozgcp.net'

18 Oct 2024

b'Mozilla' disclosed a bug submitted by b'ghaazy' 
b'two aws access key and secret key and database username and password exposed '

18 Oct 2024

b'Automattic' disclosed a bug submitted by b'nightpool' 
b'Timeline API returns private post when target of a push notification'

17 Oct 2024

b'GitHub' disclosed a bug submitted by b'pinguluk' 
b'Information Leakage via Clicked Link in GitHub Repository (Fingerprinting)'

17 Oct 2024

b'Sorare' disclosed a bug submitted by b'thebeast99' 
b'Circular based introspetion Query leading to single request denial of service and cost consumption and query cost on api.sorare.com/graphql'

17 Oct 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'4xpl0r3r' 
b'fs.fchown/fchmod bypasses permission model'

16 Oct 2024

b'Enjin' disclosed a bug submitted by b'ndizon_' 
b'Host header injection leads to account takeover'

15 Oct 2024

b'Enjin' disclosed a bug submitted by b'mo_salah12' 
b'Race Condition on Create API Function'

15 Oct 2024

1 ... 16 17 18 19 20 ... 729

BY DENIS WERNER - @NOBBD - IMPRESSUM