Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitHub Security Lab' disclosed a bug submitted by b'ciohianz' 
b'Yet another SSRF query for Go'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'avada' 
b'Yet another SSRF query for Go'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'pupiles' 
b'[GO]: [CWE-090: LDAP Injection All For One]'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'jorgectf' 
b'[Python]: CWE-079: HTTP Header injection'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'jorgectf' 
b'[Python]: JWT security-related queries'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'ihsinme: CPP Add query for CWE-675 Duplicate Operations on Resource'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs' 
b'[porcupiney.hairs]: [Python] Add Flask Path injection sinks'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-400: Query to detect uncontrolled thread resource consumption'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'edvraa' 
b'Java: Regex injection'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Javascript]: [Clipboard-based XSS]'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun' 
b'[Java] CWE-089: MyBatis Mapper XML SQL Injection'

19 Jan 2022

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-552: Query to detect unsafe request dispatcher usage'

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alex_gaynor' 
b' running a vulnerable log4j'

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alex_gaynor' 
b' running a vulnerable log4j'

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'supr4s' 
b'Reflected XSS on https:///via hidden parameter ""'

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'supr4s' 
b'Reflected XSS in https:// via hidden parameter ""'

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'drauschkolb' 
b'XSS Reflected - '

19 Jan 2022

b'U.S. Dept Of Defense' disclosed a bug submitted by b'h3xr' 
b'Wrong settings in ADF Faces leads to information disclosure'

19 Jan 2022

b'Stripe' disclosed a bug submitted by b'gregxsunday' 
b'User can pay using archived price by manipulating the request sent to `POST /v1/payment_pages/for_plink`'

19 Jan 2022

b'Recorded Future' disclosed a bug submitted by b'fornex' 
b'Dom Xss vulnerability'

19 Jan 2022

1 ... 186 187 188 189 190 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM