Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Doppler' disclosed a bug submitted by b'boy_child_' 
b'Limited access to billing dashboard by Admin and Collaborator in conflict with user role permissions.'

11 Jan 2021

b'Doppler' disclosed a bug submitted by b'shimaa_rzk' 
b'Bypass Email Verification.'

11 Jan 2021

b'Twitter' disclosed a bug submitted by b'a13h1' 
b'Bypass Password Authentication to Update the Password'

11 Jan 2021

b'Glassdoor' disclosed a bug submitted by b'root_geek' 
b'IDOR Vulnerability in Job Preferences'

11 Jan 2021

b'Automattic' disclosed a bug submitted by b'lu3ky-13' 
b'SQL Injection intensedebate.com'

11 Jan 2021

b'Stripo Inc' disclosed a bug submitted by b'splint3rsec' 
b'No rate limit in email subscription'

11 Jan 2021

b'Bitwala' disclosed a bug submitted by b'zerodivisi0n' 
b'GraphQL introspection query works through unauthenticated WebSocket'

09 Jan 2021

b'Khan Academy' disclosed a bug submitted by b'sh3rl0ck_' 
b'Login page vulnerable to bruteforce attacks via rate limiting bypass'

09 Jan 2021

b'Doppler' disclosed a bug submitted by b'bugera' 
b'Owner can change themself for another Role Mode but application doesnot have this function.'

09 Jan 2021

b'Doppler' disclosed a bug submitted by b'kirasys' 
b'Stored XSS in [https://dashboard.doppler.com/workplace/*/logs] pages'

09 Jan 2021

b'TikTok' disclosed a bug submitted by b'luizviana' 
b'Open Redirect Vulnerability on TikTok Ads Portal '

09 Jan 2021

b'curl' disclosed a bug submitted by b'jlleitschuh' 
b'SSRF via maliciously crafted URL due to host confusion'

08 Jan 2021

b'GitLab' disclosed a bug submitted by b'mike12' 
b'Stored XSS on the job page'

08 Jan 2021

b'VK.com' disclosed a bug submitted by b'dmzem' 
b' - " " VK Pay. , .'

08 Jan 2021

b'VK.com' disclosed a bug submitted by b'executor' 
b'Path Traversal iOS '

08 Jan 2021

b'VK.com' disclosed a bug submitted by b'manaenckov' 
b'XSS '

08 Jan 2021

b'VK.com' disclosed a bug submitted by b's_p_q_r' 
b'[m.vk.com] XSS /artist/ '

08 Jan 2021

b'VK.com' disclosed a bug submitted by b'executor' 
b' /'

08 Jan 2021

b'pixiv' disclosed a bug submitted by b'fanar' 
b'Bypass extension check leads to stored XSS at https://s2.booth.pm'

08 Jan 2021

b'curl' disclosed a bug submitted by b'creid' 
b'Race condition with CURL_LOCK_DATA_CONNECT can cause connections to be used at the same time'

08 Jan 2021

1 ... 187 188 189 190 191 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM