Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'foobar7' 
b'Bypass of privacy filter / tracking pixel blocker'

11 Aug 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'public webdav endpoint not bruteforce protected'

11 Aug 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'index.php/apps/files_sharing/shareinfo endpoint is not properly protected'

11 Aug 2021

b'Nextcloud' disclosed a bug submitted by b'foobar7' 
b'Download of file with arbitrary extension via injection into attachment header'

11 Aug 2021

b'Nextcloud' disclosed a bug submitted by b'lukasreschkenc' 
b'Ratelimits do not apply to OCS DataResponse'

11 Aug 2021

b'Valve' disclosed a bug submitted by b'drbrix' 
b'Modify in-flight data to payment provider Smart2Pay'

10 Aug 2021

b'Acronis' disclosed a bug submitted by b'aapo' 
b'Acronis True Image 2021 (windows) does not validate server hostname on a login TLS connection'

10 Aug 2021

b'UPchieve' disclosed a bug submitted by b'n1had' 
b'Password reset token leak on third party website via Referer header'

10 Aug 2021

b'Basecamp' disclosed a bug submitted by b'blackbibin' 
b'Login session not expire'

10 Aug 2021

b'Basecamp' disclosed a bug submitted by b'zofrex' 
b'Insecure Bundler configuration fetching internal Gems (okra) from Rubygems.org'

10 Aug 2021

b'Basecamp' disclosed a bug submitted by b'blackbibin' 
b'Password reset link not expiring after changing password in settings'

10 Aug 2021

b'HackerOne' disclosed a bug submitted by b'adhamsadaqah' 
b'Tab nabbing in Hackerone inbox.'

09 Aug 2021

b'HackerOne' disclosed a bug submitted by b'iamr0000t' 
b'PII data Leakage through hackerone reports '

09 Aug 2021

b'Acronis' disclosed a bug submitted by b'twvyy3vyaw8k' 
b'Local privilege escalation via insecure MSI file'

07 Aug 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Webauthn tokens are not removed on user deletion'

07 Aug 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Virtual Data Room / Hide download on collabora is easy to bypass'

07 Aug 2021

b'Kubernetes' disclosed a bug submitted by b'j0v' 
b'Loading YAML in Java client can lead to command execution'

07 Aug 2021

b'Mattermost' disclosed a bug submitted by b'shielder' 
b'Mattermost Server OAuth Flow Cross-Site Scripting'

06 Aug 2021

b'Uber' disclosed a bug submitted by b'0xprial' 
b'CVE-2020-3452 - unauthenticated file read on anyconnect.routematch.com'

05 Aug 2021

b'HackerOne' disclosed a bug submitted by b'tomvg' 
b'Partial report contents leakage - via HTTP/2 concurrent stream handling'

05 Aug 2021

1 ... 181 182 183 184 185 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM