Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Stripo Inc' disclosed a bug submitted by b'andformod' 
b'Insecure Storage and Overly Permissive API Keys'

30 Mar 2022

b'Stripo Inc' disclosed a bug submitted by b'0xkira' 
b'Ability to use premium templates as free user via https://stripo.email/templates/?utm_source=viewstripo&utm_medium=referral'

30 Mar 2022

b'Twitter' disclosed a bug submitted by b'aymen_mansour' 
b'Identify the mobile number of a twitter user'

29 Mar 2022

b'Evernote' disclosed a bug submitted by b'hulkvision_' 
b'2 click Remote Code execution in Evernote Android'

29 Mar 2022

b'curl' disclosed a bug submitted by b'jenny' 
b'Denial of Service vulnerability in curl when parsing MQTT server response'

28 Mar 2022

b'Shopify' disclosed a bug submitted by b'0xd0m7' 
b'EC2 Takeover at turn.shopify.com'

28 Mar 2022

b'Basecamp' disclosed a bug submitted by b'danielllewellyn' 
b'Able to steal bearer token from deep link'

27 Mar 2022

b'UPchieve' disclosed a bug submitted by b'rupachandransangothi' 
b'OTP reflecting in response sensitive data exposure leads to account take over'

26 Mar 2022

b'UPchieve' disclosed a bug submitted by b'pranto_0' 
b'No Rate Limit on forgot password page'

26 Mar 2022

b'UPchieve' disclosed a bug submitted by b'ww1' 
b'Password reset token leakage'

26 Mar 2022

b'UPchieve' disclosed a bug submitted by b'ww1' 
b'Missing Validation in editing "Your Phone Number" '

26 Mar 2022

b'UPchieve' disclosed a bug submitted by b'ww1' 
b'Password Reuse'

26 Mar 2022

b'UPchieve' disclosed a bug submitted by b'ww1' 
b'Outdated Copyright Message @ Welcome email'

26 Mar 2022

b'UPchieve' disclosed a bug submitted by b'rupachandransangothi' 
b'No rate Limit on Password Reset page on upchieve'

26 Mar 2022

b'UPchieve' disclosed a bug submitted by b'sara346' 
b'Clickjacking login page of https://hackers.upchieve.org/login'

26 Mar 2022

b'UPchieve' disclosed a bug submitted by b'bd10ceb041a5297f881137c' 
b'No Rate Limiting for Password Reset Email Leads to Email Flooding'

26 Mar 2022

b'Alohi' disclosed a bug submitted by b'shamim_12__' 
b'Misconfigured Rate Limit at app.sign.plus/forgot_password'

25 Mar 2022

b'8x8' disclosed a bug submitted by b'remonsec' 
b'F5 BIG-IP TMUI RCE - CVE-2020-5902 (.packet8.net)'

25 Mar 2022

b'Dragon' disclosed a bug submitted by b'engr-naseem1' 
b'Business Logic Flaw in the subscription of the app'

25 Mar 2022

b'Kubernetes' disclosed a bug submitted by b'0xlegendkiller' 
b'Broken link hijacking in https://kubernetes-csi.github.io/docs/drivers.html?highlight=chubaofs#production-drivers'

25 Mar 2022

1 ... 176 177 178 179 180 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM