Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Automattic' disclosed a bug submitted by b'ajoekerr' 
b'Ability to subscribe to inactive Post+ creators'

05 Oct 2021

b'Acronis' disclosed a bug submitted by b'skimask' 
b'Domain does not Match SSL Certificate'

05 Oct 2021

b'Acronis' disclosed a bug submitted by b'hackipie' 
b'No server side check on terms of service page which leads to bypass'

05 Oct 2021

b'Acronis' disclosed a bug submitted by b'lu3ky-13' 
b'bypass sql injection #1109311'

05 Oct 2021

b'Concrete CMS' disclosed a bug submitted by b'bl4de' 
b'Stored XSS in Conversations (both client and admin) when Active Conversation Editor is set to "Rich Text"'

04 Oct 2021

b'Concrete CMS' disclosed a bug submitted by b'pabl00nicarres' 
b'SSRF bypass'

04 Oct 2021

b'UPchieve' disclosed a bug submitted by b'1bdool492' 
b'No Rate Limiting on /reset-password-request/ endpoint'

04 Oct 2021

b'Zilliqa' disclosed a bug submitted by b'ahook' 
b'Using gossip to drain miner wallets'

04 Oct 2021

b'Slack' disclosed a bug submitted by b'joaovitormaia' 
b'Denial of Service via Hyperlinks in Posts'

03 Oct 2021

b'U.S. General Services Administration' disclosed a bug submitted by b'0x0luke' 
b'Path Traversal on meetcqpub1.gsa.gov allows attackers to see arbitrary file listings.'

02 Oct 2021

b'TikTok' disclosed a bug submitted by b'siratsami' 
b'Broken Link on TikTokUS.Info'

01 Oct 2021

b'OneWeb' disclosed a bug submitted by b'lesleybw' 
b'Vulnerable Jira Instance'

30 Sep 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pr3r00t' 
b' - XSS - CVE-2020-3580'

29 Sep 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0x3f' 
b"Information disclosure at '' --- CVE-2020-14179"

29 Sep 2021

b'QIWI' disclosed a bug submitted by b'wdahlenb' 
b'HTTP Request Smuggling on api.flocktory.com Leads to XSS on Customer Sites'

29 Sep 2021

b'Mail.ru' disclosed a bug submitted by b'uddeshaya001' 
b'[ii.worki.ru ] emarsys subdomain takeover'

28 Sep 2021

b'MTN Group' disclosed a bug submitted by b'devhug' 
b'[mtn.com.af] Multiple vulnerabilities allow to Application level DoS'

28 Sep 2021

b'Internet Bug Bounty' disclosed a bug submitted by b'ouyang' 
b'CVE-2021-3711: SM2 decrypt buffer overflow '

27 Sep 2021

b'Localize' disclosed a bug submitted by b'thd3r7' 
b'Stored XSS in Document Title'

27 Sep 2021

b'Tor' disclosed a bug submitted by b'sickcodes' 
b'Tor Browser using --log or --verbose logs the exact connection time a client connects to any v2 domains.'

27 Sep 2021

1 ... 170 171 172 173 174 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM