REPORTS
PROGRAMS
PUBLISHERS
Top10 publishers:
b'bobrov'
117
b'sp1d3rs'
86
b'geeknik'
80
b'linkks'
75
b'jobert'
70
b'someonenobbd'
62
b'nyymi'
58
b'ooooooo_q'
52
b'haxta4ok00'
49
b'jon_bottarini'
49
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'GitHub'
disclosed a bug submitted by
b'astrounder'
b'Source Code and data exfiltration via Github Copilot'
19 Aug 2024
b'MTN Group'
disclosed a bug submitted by
b'impozzible'
b'FULL ACCOUNT TAKEOVER'
17 Aug 2024
b'IBM'
disclosed a bug submitted by
b'cyber_punk'
b'jazz.net - publicly accessible .svn repositories'
16 Aug 2024
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'prakhar0x01'
b'Cross Site Scripting'
16 Aug 2024
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'steveflex'
b'Course Registration Form Allowing an attacker to dump all the candidate name who had enrolled for the course'
16 Aug 2024
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'socpuppet'
b'DoD workstation exposed to internet via TinyPilot KVM with no authentication'
16 Aug 2024
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'sp1d3rs'
b'Blind Stored XSS on the internal host - '
16 Aug 2024
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'sp1d3rs'
b'Unauthenticated arbitrary file upload on the https:/// ()'
16 Aug 2024
b'Internet Bug Bounty'
disclosed a bug submitted by
b'orange'
b'moderate: Apache HTTP Server: mod_rewrite proxy handler substitution (CVE-2024-39573) CWE-20 Improper Input Validation'
12 Aug 2024
b'RATELIMITED'
disclosed a bug submitted by
b'fdeleite'
b'Subdomain takeover in GitLab Pages [george.ratelimited.me]'
11 Aug 2024
b'Rocket.Chat'
disclosed a bug submitted by
b'gronke'
b'XSS via /api/v1/chat.postMessage '
10 Aug 2024
b'Rocket.Chat'
disclosed a bug submitted by
b'gronke'
b'Guest Privilege Escalation to admin group'
10 Aug 2024
b'Rocket.Chat'
disclosed a bug submitted by
b'gronke'
b'Upload of Avatars for other Users'
10 Aug 2024
b'Rocket.Chat'
disclosed a bug submitted by
b'gronke'
b'Online Status of arbitrary users can be changed'
10 Aug 2024
b'Rocket.Chat'
disclosed a bug submitted by
b'gronke'
b'CSS Injection in Message Avatar'
10 Aug 2024
b'Rocket.Chat'
disclosed a bug submitted by
b'gronke'
b'Unread Messages can leak Message IDs'
10 Aug 2024
b'Rocket.Chat'
disclosed a bug submitted by
b'gronke'
b'Registration bypass with leaked Invite Token'
10 Aug 2024
b'Rocket.Chat'
disclosed a bug submitted by
b'gronke'
b'Unauthenticated clients can modify Livechat Business Hours'
10 Aug 2024
b'Rocket.Chat'
disclosed a bug submitted by
b'gronke'
b'Improper ACL in Message Starring'
10 Aug 2024
b'Rocket.Chat'
disclosed a bug submitted by
b'gronke'
b'User Impersonation through sendMessage options'
10 Aug 2024
1
...
18
19
20
21
22
...
724
BY DENIS WERNER - @NOBBD -
IMPRESSUM