Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Ransomware protection is missing extentions take 2'

16 Jul 2021

b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j' 
b'[Java] CWE-918: Added URLClassLoader and WebClient SSRF sinks'

15 Jul 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java]: CWE 295 - Insecure TrustManager - MiTM'

15 Jul 2021

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun' 
b'[Java] JShell Injection'

15 Jul 2021

b'GitHub Security Lab' disclosed a bug submitted by b'timolesml' 
b'[Java]: CWE-665 Insecure environment during RMI/JMX Server initialisation - All for one bounty'

15 Jul 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java]: CWE 295 - Insecure TrustManager - MiTM'

15 Jul 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Admin audit is not properly logging unsetting of expiration date'

15 Jul 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'User deletion is not handled properly everywhere'

15 Jul 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Scoped apptokens can be changed by that very apptoken'

15 Jul 2021

b'Basecamp' disclosed a bug submitted by b'princej_76' 
b'Error Page Content Spoofing or Text Injection '

14 Jul 2021

b'Twitter' disclosed a bug submitted by b'jaka_tingkir' 
b'[Bypass fixed #664038 and #519059] Application settings change settings that have been set by the user'

13 Jul 2021

b'GitLab' disclosed a bug submitted by b'ajxchapman' 
b'FogBugz import attachment full SSRF requiring vulnerability in *.fogbugz.com'

13 Jul 2021

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'Stored-XSS in merge requests'

13 Jul 2021

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'Stored-XSS on wiki pages'

13 Jul 2021

b'Ruby' disclosed a bug submitted by b'chinarulezzz' 
b"OS Command Injection in 'rdoc' documentation generator"

13 Jul 2021

b'GitLab' disclosed a bug submitted by b'taraszelyk' 
b'Client-Side DOS via Mermaid Prototype Pollution vulnerability'

12 Jul 2021

b'GitLab' disclosed a bug submitted by b'taraszelyk' 
b'Stored DOM XSS via Mermaid chart'

12 Jul 2021

b'Shopify' disclosed a bug submitted by b'danishalkatiri' 
b'your-store.myshopify.com preview link is leak on third party website lead to preview all action from store owner Without store Password.'

12 Jul 2021

b'Topcoder' disclosed a bug submitted by b'c0mbo' 
b'Reflected XSS in https://www.topcoder.com/blog/category/community-stories/'

12 Jul 2021

b'R3' disclosed a bug submitted by b'ian' 
b'Exposed Prometheus instance at prometheus.qa.r3.com'

12 Jul 2021

1 ... 175 176 177 178 179 ... 731

BY DENIS WERNER - @NOBBD - IMPRESSUM