Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Javascript]: [Clipboard-based XSS]'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun' 
b'[Java] CWE-089: MyBatis Mapper XML SQL Injection'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-552: Query to detect unsafe request dispatcher usage'

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alex_gaynor' 
b' running a vulnerable log4j'

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alex_gaynor' 
b' running a vulnerable log4j'

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'supr4s' 
b'Reflected XSS on https:///via hidden parameter ""'

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'supr4s' 
b'Reflected XSS in https:// via hidden parameter ""'

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'drauschkolb' 
b'XSS Reflected - '

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'h3xr' 
b'Wrong settings in ADF Faces leads to information disclosure'

19 Jan 2022

b'Stripe' disclosed a bug submitted by b'gregxsunday' 
b'User can pay using archived price by manipulating the request sent to `POST /v1/payment_pages/for_plink`'

19 Jan 2022

b'Recorded Future' disclosed a bug submitted by b'fornex' 
b'Dom Xss vulnerability'

19 Jan 2022

b'Mail.ru' disclosed a bug submitted by b'ian' 
b'Exposed Golang debugger on tier3.riot.mail.ru:9090, 9080'

19 Jan 2022

b'Urban Dictionary' disclosed a bug submitted by b'bemodtwz' 
b'DOM XSS through ads'

18 Jan 2022

b'Automattic' disclosed a bug submitted by b'rockybandana' 
b'SSRF & Blind XSS in Gravatar email '

17 Jan 2022

b'Palo Alto Software' disclosed a bug submitted by b'paramdham' 
b' Clickjacking'

17 Jan 2022

b'Slack' disclosed a bug submitted by b'jub0bs' 
b'Lack of URL normalization renders Blocked-Previews feature ineffectual'

16 Jan 2022

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar' 
b'In orginization stored xss using location (Larksuite survey app)'

14 Jan 2022

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar' 
b"Stored xss on helpdesk using user's city"

14 Jan 2022

b'IBM' disclosed a bug submitted by b'xyantix' 
b'SQL Injection and plaintext passwords via User Search'

14 Jan 2022

b'Django' disclosed a bug submitted by b'scaramouche31' 
b'Deserialization of potentially malicious data to RCE'

14 Jan 2022

1 ... 185 186 187 188 189 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM