Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Fastify' disclosed a bug submitted by b'drstrnegth' 
b"Open redirect in fastify-static via mishandled user's input when attempt to redirect"

11 Oct 2021

b'GitLab' disclosed a bug submitted by b'joaxcar' 
b'Privilege escalation of "external user" (with maintainer privilege) to internal access through project token'

11 Oct 2021

b'Mail.ru' disclosed a bug submitted by b'melbadry9' 
b'CVE-2020-11110: Grafana Unauthenticated Stored XSS - grafana-lms.rsv.bizml.ru'

11 Oct 2021

b'Ubiquiti Inc.' disclosed a bug submitted by b'nih8l' 
b'XW 6.2.0 firmware: 5 Reflected XSS issues in link.cgi'

10 Oct 2021

b'Ubiquiti Inc.' disclosed a bug submitted by b'nih8l' 
b'3x Reflected XSS vectors for services.cgi (XM.v6.1.6, build 32290)'

10 Oct 2021

b'Kubernetes' disclosed a bug submitted by b'champtar' 
b'Man in the middle leading to root privilege escalation using hostNetwork=true (CAP_NET_RAW considered harmful)'

08 Oct 2021

b'Kubernetes' disclosed a bug submitted by b'lazydog' 
b'SSRF for kube-apiserver cloudprovider scene'

07 Oct 2021

b'Elastic' disclosed a bug submitted by b'fdeleite' 
b'CVE-2021-40870 on [52.204.160.31]'

06 Oct 2021

b'Zomato' disclosed a bug submitted by b'ashoka_rao' 
b'Improper Validation at Partners Login'

06 Oct 2021

b'Automattic' disclosed a bug submitted by b'ajoekerr' 
b'Ability to subscribe to inactive Post+ creators'

05 Oct 2021

b'Acronis' disclosed a bug submitted by b'skimask' 
b'Domain does not Match SSL Certificate'

05 Oct 2021

b'Acronis' disclosed a bug submitted by b'hackipie' 
b'No server side check on terms of service page which leads to bypass'

05 Oct 2021

b'Acronis' disclosed a bug submitted by b'lu3ky-13' 
b'bypass sql injection #1109311'

05 Oct 2021

b'Concrete CMS' disclosed a bug submitted by b'bl4de' 
b'Stored XSS in Conversations (both client and admin) when Active Conversation Editor is set to "Rich Text"'

04 Oct 2021

b'Concrete CMS' disclosed a bug submitted by b'pabl00nicarres' 
b'SSRF bypass'

04 Oct 2021

b'UPchieve' disclosed a bug submitted by b'1bdool492' 
b'No Rate Limiting on /reset-password-request/ endpoint'

04 Oct 2021

b'Zilliqa' disclosed a bug submitted by b'ahook' 
b'Using gossip to drain miner wallets'

04 Oct 2021

b'Slack' disclosed a bug submitted by b'joaovitormaia' 
b'Denial of Service via Hyperlinks in Posts'

03 Oct 2021

b'U.S. General Services Administration' disclosed a bug submitted by b'0x0luke' 
b'Path Traversal on meetcqpub1.gsa.gov allows attackers to see arbitrary file listings.'

02 Oct 2021

b'TikTok' disclosed a bug submitted by b'siratsami' 
b'Broken Link on TikTokUS.Info'

01 Oct 2021

1 ... 174 175 176 177 178 ... 746

BY DENIS WERNER - @NOBBD - IMPRESSUM