Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Krisp' disclosed a bug submitted by b'razahack' 
b'Visibility Robots.txt file'

25 Apr 2022

b'Shopify' disclosed a bug submitted by b'danishalkatiri' 
b'Xss triggered in Your-store.myshopify.com/myshopify.com/admin/apps/shopify-email/editor/****'

25 Apr 2022

b'curl' disclosed a bug submitted by b'nyymi' 
b'CURLOPT_SSH_HOST_PUBLIC_KEY_SHA256 comparison disaster'

25 Apr 2022

b'curl' disclosed a bug submitted by b'nyymi' 
b'CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 bypass if string not 32 chars'

25 Apr 2022

b'curl' disclosed a bug submitted by b'nyymi' 
b'--libcurl code injection via trigraphs'

24 Apr 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'palmeral' 
b' Renderers can obtain access to random bluetooth device without permission'

23 Apr 2022

b'Kubernetes' disclosed a bug submitted by b'thisbug' 
b'Attacker can bypass authentication build on ingress external auth (`nginx.ingress.kubernetes.io/auth-url`)'

23 Apr 2022

b'Shopify' disclosed a bug submitted by b'encryptsaan123' 
b'Bypass of fix #1370749'

22 Apr 2022

b'Shopify' disclosed a bug submitted by b'tomorrow_future' 
b'After changing the storefront password, the preview link is still valid'

21 Apr 2022

b'BlackRock' disclosed a bug submitted by b'mrccrqr' 
b'Open redirect by the parameter redirectUri in the URL'

21 Apr 2022

b'Shopify' disclosed a bug submitted by b'ngalog' 
b'[h1-2102] [Plus] User with Store Management Permission can Make changeDomainEnforcementState - that should be limited to User Management Only'

21 Apr 2022

b'Shopify' disclosed a bug submitted by b'ngalog' 
b'[h1-2102] [Plus] User with Store Management Permission can Make convertUsersFromSaml/convertUsersToSaml - that should be limited to User Management'

21 Apr 2022

b'Shopify' disclosed a bug submitted by b'ngalog' 
b'[h1-2102] [PLUS] User with Store Management Permission can Make enforceSamlOrganizationDomains call - that should be limited to User Management Only'

21 Apr 2022

b'Shopify' disclosed a bug submitted by b'ayyoub' 
b'User with no Develop apps permission can Uninstall Custom App'

21 Apr 2022

b'Shopify' disclosed a bug submitted by b'ramsexy' 
b'[h1-2102] Improper Access Control at https://shopify.plus/[id]/users/api in operation UpdateOrganizationUserRole'

21 Apr 2022

b'Shopify' disclosed a bug submitted by b'4bel' 
b'Same the Url'

21 Apr 2022

b'curl' disclosed a bug submitted by b'medianmedianstride' 
b"curl proceeds with unsafe connections when -K file can't be read"

21 Apr 2022

b'Zivver' disclosed a bug submitted by b'martinvw' 
b'Timing difference exposes existence of accounts'

21 Apr 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'whoisbinit' 
b'Open Akamai ARL XSS at '

20 Apr 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'takester' 
b'Full account takeover in due lack of rate limiting in forgot password'

20 Apr 2022

1 ... 171 172 173 174 175 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM