Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'TikTok' disclosed a bug submitted by b'arifmkhls' 
b'Information Leakage via TikTok Ads Web Cache Deception'

31 Mar 2022

b'GitLab' disclosed a bug submitted by b'joaxcar' 
b'Stored XSS in merge request creation page through payload in approval rule name'

31 Mar 2022

b'Judge.me ' disclosed a bug submitted by b'glister' 
b'IDOR: leak buyer info & Publish/Hide foreign comments'

31 Mar 2022

b'Judge.me ' disclosed a bug submitted by b'glister' 
b'Stored XSS in Question edit from product name'

31 Mar 2022

b'Judge.me ' disclosed a bug submitted by b'glister' 
b'stored XSS on AliExpress Review Importer/Products when delete product'

31 Mar 2022

b'Judge.me ' disclosed a bug submitted by b'glister' 
b'Stored XSS in Question edit for product name (bypass #1416672)'

31 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'ihsinme: CPP Add a query to find incorrectly used exceptions. '

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun' 
b'[Python]: Add shutil module sinks for path injection query'

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'artem' 
b'Java: An experimental query for ignored hostname verification'

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java]: CWE-073 - File path injection with the JFinal framework'

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'CPP: Add query for CWE-266 Incorrect Privilege Assignment'

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[C#] CWE-759: Query to detect password hash without a salt'

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs' 
b'Java : Add query to detect Server Side Template Injection (SSTI)'

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'museljh' 
b'Python: CWE-338 insecureRandomness'

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'farid_hunter' 
b'[Java]: Timing attacks while comparing the headers value'

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j' 
b'[Java]: Add JDBC connection SSRF sinks'

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'jorgectf' 
b'[Python]: CWE-611: XXE'

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'CPP: Add query for CWE-377 Insecure Temporary File'

30 Mar 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java]: CWE-200 - Query to detect insecure WebResourceResponse implementation'

30 Mar 2022

b'Stripo Inc' disclosed a bug submitted by b'whoisbinit' 
b'Upload Profile Photo in any folder you want with any extension you want'

30 Mar 2022

1 ... 175 176 177 178 179 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM