Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Slack' disclosed a bug submitted by b'hitman_47' 
b'Stored XSS through PDF viewer'

16 Mar 2022

b'Flickr' disclosed a bug submitted by b'c4rrilat0rr' 
b'Open redirect GET-Based on https://www.flickr.com/browser/upgrade/?continue='

16 Mar 2022

b'Reddit' disclosed a bug submitted by b'whitehacker18' 
b'registering with the same email address multiple times leads to account takeover '

14 Mar 2022

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'User files is disclosed when someone called while the screen is locked'

14 Mar 2022

b'Mattermost' disclosed a bug submitted by b'thesecuritydev' 
b'Specially crafted message request crashes the webapp for users who view the message'

14 Mar 2022

b'IBM' disclosed a bug submitted by b'0xelkomy' 
b'CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability - https://esccvc.de.ibm.com'

11 Mar 2022

b'IBM' disclosed a bug submitted by b'thesanjok' 
b'Public Jenkins instance with /script enabled'

11 Mar 2022

b'Reddit' disclosed a bug submitted by b'ahacker1' 
b'XSS via Mod Log Removed Posts'

10 Mar 2022

b'8x8' disclosed a bug submitted by b'ig420_vrush' 
b'Open Redirect on https://.8x8.com/login?nextPage=%2F'

10 Mar 2022

b'curl' disclosed a bug submitted by b'shobhit2401200' 
b'Use of Unsafe function || Strcpy'

09 Mar 2022

b'curl' disclosed a bug submitted by b'eliasknudsen' 
b'Binary output bypass'

09 Mar 2022

b'curl' disclosed a bug submitted by b'luminixaaron' 
b'Occasional use-after-free in multi_done() libcurl-7.81.0'

09 Mar 2022

b'Krisp' disclosed a bug submitted by b'mrirfan__07' 
b'Error Page Content Spoofing or Text Injection'

09 Mar 2022

b'Krisp' disclosed a bug submitted by b'blackxxhat' 
b'Unsubscripe linkes leaked'

09 Mar 2022

b'Equifax' disclosed a bug submitted by b'miguel_santareno' 
b'RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter'

09 Mar 2022

b'FetLife' disclosed a bug submitted by b'trieulieuf9' 
b'Race condition in endpoint POST fetlife.com/users/invitation, allow attacker to generate unlimited invites'

09 Mar 2022

b'Nextcloud' disclosed a bug submitted by b'fancycode' 
b'High memory usage for generating preview of broken image'

09 Mar 2022

b'Stripe' disclosed a bug submitted by b'bubbounty' 
b'GRAPHQL cross-tenant IDOR giving write access thought the operation UpdateAtlasApplicationPerson'

08 Mar 2022

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'objectId in share location can be set to open arbitrary URL or Deeplinks'

08 Mar 2022

b'MTN Group' disclosed a bug submitted by b'pudsec' 
b'PHP Info Exposing Secrets at https://radio.mtn.bj/info'

08 Mar 2022

1 ... 179 180 181 182 183 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM