Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'TikTok' disclosed a bug submitted by b'bushidobrown200' 
b'Impersonation of tiktok account via Broken Link in TikTok Newsroom'

24 Mar 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'hkratz' 
b'Time-of-check to time-of-use vulnerability in the std::fs::remove_dir_all() function of the Rust standard library'

24 Mar 2022

b'Basecamp' disclosed a bug submitted by b'fuzzsqlb0f' 
b'Improper Authentication via previous backup code login'

24 Mar 2022

b'Stripe' disclosed a bug submitted by b'gregxsunday' 
b'Bypassing domain deny_list rule in Smokescreen via trailing dot leads to SSRF'

23 Mar 2022

b'pixiv' disclosed a bug submitted by b'aidilarf_2000' 
b'XSS Reflected at https://sketch.pixiv.net/ Via `next_url`'

23 Mar 2022

b'ImpressCMS' disclosed a bug submitted by b'egix' 
b'Incorrect Authorization Checks in /include/findusers.php'

22 Mar 2022

b'ImpressCMS' disclosed a bug submitted by b'egix' 
b'Arbitrary File Deletion via Path Traversal in image-edit.php'

22 Mar 2022

b'ImpressCMS' disclosed a bug submitted by b'egix' 
b'Potential Authentication Bypass through "autologin" feature'

22 Mar 2022

b'Internet Bug Bounty' disclosed a bug submitted by b'addisoncrump' 
b'Regexes with large repetitions on empty sub-expressions take a very long time to parse'

22 Mar 2022

b'Omise' disclosed a bug submitted by b'sim4n6' 
b"The endpoint '/test/webhooks' is vulnerable to DNS Rebinding"

22 Mar 2022

b'Omise' disclosed a bug submitted by b'sim4n6' 
b'Race condition on action: Invite members to a team'

22 Mar 2022

b'Khan Academy' disclosed a bug submitted by b'sim4n6' 
b'The endpoint /api/internal/graphql/requestAuthEmail on Khanacademy.or is vulnerable to Race Condition Attack.'

22 Mar 2022

b'Lyst' disclosed a bug submitted by b'deksterh1' 
b'Web Cache poisoning attack leads to User information Disclosure and more'

22 Mar 2022

b'Lyst' disclosed a bug submitted by b'mandark' 
b'[https:///]&&[https:///] Open Redirection'

22 Mar 2022

b'Mattermost' disclosed a bug submitted by b'rynexxx' 
b'html injection via invite members can be leads account takeover '

22 Mar 2022

b'Adobe' disclosed a bug submitted by b'sheikhrishad0' 
b'Log4j Java RCE in [beta.dev.adobeconnect.com]'

21 Mar 2022

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'Arbitrary file read via the bulk imports UploadsPipeline'

21 Mar 2022

b'Glassdoor' disclosed a bug submitted by b'safehacker_2715' 
b'Get all personal email IDs of Glassdoor users[No user interaction required]'

21 Mar 2022

b'SecurityScorecard' disclosed a bug submitted by b'ww1' 
b'RXSS '

20 Mar 2022

b'MTN Group' disclosed a bug submitted by b'xlife' 
b'Insecure crossdomain.xml on https://vdc.mtnonline.com/'

20 Mar 2022

1 ... 177 178 179 180 181 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM