Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'lubak' 
b'Authorization bypass -> IDOR -> PII Leakage'

07 Apr 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mamunwhh' 
b'Cross-site Scripting (XSS) - Reflected at https:///'

07 Apr 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'lubak' 
b'SQL Injection in '

07 Apr 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'homosec' 
b"XSS on https:///' parameter"

07 Apr 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'homosec' 
b'XSS on https:/// parameter'

07 Apr 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'homosec' 
b'XSS on https:/// via parameter'

07 Apr 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'homosec' 
b'XSS on https:/// via parameter'

07 Apr 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'whoisbinit' 
b'Open Akamai ARL XSS at '

07 Apr 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'whoisbinit' 
b'Bypassing CORS Misconfiguration Leads to Sensitive Exposure at https:///'

07 Apr 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'drauschkolb' 
b'XSS Reflected - '

07 Apr 2022

b'Rockstar Games' disclosed a bug submitted by b'toxiqcitee' 
b'Uninstalling Rockstar Games Launcher for Windows (64-bit), then reinstalling keeps you logged in without authentication'

07 Apr 2022

b'Zomato' disclosed a bug submitted by b'schutzx0r' 
b'Attacker shall recieve order updates on whatsapp for users who have activated whatsapp notification'

06 Apr 2022

b'Palantir Public' disclosed a bug submitted by b'haxor31337' 
b'SQL Injection at https://files.palantir.com/ due to CVE-2021-38159'

05 Apr 2022

b'HackerOne' disclosed a bug submitted by b'bigbug' 
b'Private invitation links/tokens leak to third-party analytics site'

05 Apr 2022

b'Krisp' disclosed a bug submitted by b'alp' 
b'[api.krisp.ai] Race condition on /v2/seats endpoint allows bypassing the original seat limit'

04 Apr 2022

b'Kubernetes' disclosed a bug submitted by b'0xlegendkiller' 
b'Broken Domain Link Takeover from kubernetes.io docs'

03 Apr 2022

b'Stripe' disclosed a bug submitted by b'd_sharad' 
b'CSRF token validation system is disabled on Stripe Dashboard'

02 Apr 2022

b'Slack' disclosed a bug submitted by b'kadusantiago' 
b'Workspace configuration metadata disclosure'

01 Apr 2022

b'Sifchain' disclosed a bug submitted by b'hrdfrdh' 
b'Subdomain Takeover on proxies.sifchain.finance pointing to vercel'

01 Apr 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'happyhacking123' 
b'CVE-2022-24288: Apache Airflow: TWO RCEs in example DAGs'

01 Apr 2022

1 ... 174 175 176 177 178 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM