Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'LINE' disclosed a bug submitted by b'duahaubadao' 
b'SSRF restricted to HTTP/HTML on LINE Social Plugins (https://social-plugins.line.me/)'

18 Apr 2022

b'Shopify' disclosed a bug submitted by b'beastglatisant' 
b'[https://shipit-sox-staging.shopifycloud.com] Presence of multiple vulnerabilities present in Ruby On Rails'

16 Apr 2022

b'U.S. General Services Administration' disclosed a bug submitted by b'hollaatm3' 
b'Account takeover leading to PII chained with stored XSS'

16 Apr 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'tdp3kel9g' 
b'Read and write beyond bounds in mod_sed'

14 Apr 2022

b'HackerOne' disclosed a bug submitted by b'0619' 
b'[Bypass] Ability to invite a new member in sandbox Organization '

14 Apr 2022

b'TikTok' disclosed a bug submitted by b'homosec' 
b'Reflected XSS on TikTok Website'

13 Apr 2022

b'GitHub' disclosed a bug submitted by b'bitquark' 
b'CSRF protection bypass in GitHub Enterprise management console'

13 Apr 2022

b'Automattic' disclosed a bug submitted by b'superpan' 
b'Stored XSS on the "www.intensedebate.com/extras-widgets" url at "Recent comments by" module with malicious blog url'

13 Apr 2022

b'EXNESS' disclosed a bug submitted by b'holyfield' 
b'Improper Implementation of SDK Allows Universal XSS in Webview Leading to Account Takeover'

13 Apr 2022

b'Shopify' disclosed a bug submitted by b'saltymermaid' 
b'Ability to connect an external login service for unverified emails/accounts at accounts.shopify.com'

13 Apr 2022

b'EXNESS' disclosed a bug submitted by b'socialcodia' 
b'CRLF Injection - Http Response Splitting '

13 Apr 2022

b'EXNESS' disclosed a bug submitted by b'a_ashwarya' 
b'Acess control vulnerability (read/write)'

13 Apr 2022

b'EXNESS' disclosed a bug submitted by b'a_ashwarya' 
b'Access control vulnerability (read/write)'

13 Apr 2022

b'EXNESS' disclosed a bug submitted by b'a_ashwarya' 
b'Access control vulnerability (read-only)'

13 Apr 2022

b'EXNESS' disclosed a bug submitted by b'a_ashwarya' 
b'Taking position in a discontinued forex pair without executing any trades'

13 Apr 2022

b'Omise' disclosed a bug submitted by b'ravansurya' 
b'Open S3 Bucket Accessible by any User'

13 Apr 2022

b'Reddit' disclosed a bug submitted by b'dingleberryfarts' 
b'Regular Expression Denial of Service vulnerability'

12 Apr 2022

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'RCE via WikiCloth markdown rendering if the `rubyluabridge` gem is installed'

12 Apr 2022

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Python]: Add Server-side Request Forgery sinks'

11 Apr 2022

b'MTN Group' disclosed a bug submitted by b'muhnad' 
b'Insecure Storage of Sensitive Information on lonestarcell.com server'

09 Apr 2022

1 ... 171 172 173 174 175 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM