Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Hyperledger' disclosed a bug submitted by b'swang1994' 
b'Vulnerabilities in Endorsement Mechanism of Private Data Related Transactions in Hyperledger Fabric 2.0'

30 Mar 2021

b'Uber' disclosed a bug submitted by b'healdb' 
b'Chained vulnerabilities create DOS attack against users on desafio5estrelas.com'

30 Mar 2021

b'Uber' disclosed a bug submitted by b'healdb' 
b'Cleartext password exposure allows access to the desafio5estrelas.com admin panel'

30 Mar 2021

b'CS Money' disclosed a bug submitted by b'sawmj' 
b'Origin IP found, Cloudflare bypassed'

30 Mar 2021

b'Acronis' disclosed a bug submitted by b'atikna' 
b'Account Confirmation bypass leads to acess some fucntionality '

30 Mar 2021

b'PlayStation' disclosed a bug submitted by b'pwrofwon' 
b'Unrestricted access to quiesce functionality in dss.api.playstation.com REST API leads to unavailability of application'

30 Mar 2021

b'PlayStation' disclosed a bug submitted by b'vakzz' 
b'Reflected XSS on transact.playstation.com using postMessage from the opening window'

30 Mar 2021

b'PlayStation' disclosed a bug submitted by b'bugdiscloseguys' 
b'SSRF chained to hit internal host leading to another SSRF which allows to read internal images.'

30 Mar 2021

b'Uber' disclosed a bug submitted by b'm4ll0x0k' 
b'Critical Information disclosure of rtapi token for any user via https://video-support-staging.uber.com/video/api/getPopulousUser'

29 Mar 2021

b'Uber' disclosed a bug submitted by b'healdb' 
b'SQLI on desafio5estrelas.com '

29 Mar 2021

b'Basecamp' disclosed a bug submitted by b'h4x0r_dz' 
b'User can upload files even after closing his account'

29 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'thiennv' 
b'Reflected XSS on https://deti.mail.ru'

29 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'dzmitry' 
b'Mail.Ru Email for Android: Injecting custom screen inside adding new account flow'

29 Mar 2021

b'PortSwigger Web Security' disclosed a bug submitted by b'issuefinder' 
b'HTML Injection in Swing can disclose netNTLM hash or cause DoS'

29 Mar 2021

b'Lark Technologies' disclosed a bug submitted by b'jin0ne' 
b'Server Side Request Forgery'

29 Mar 2021

b'HackerOne' disclosed a bug submitted by b'nagli' 
b'Reflected XSS and possible SSRF/XXE on https://events.hackerone.com/conferences/get_recording_slides_xml.xml?url=myserver/xss.xml'

26 Mar 2021

b'HackerOne' disclosed a bug submitted by b'nagli' 
b'Open Redirect on http://events.hackerone.com/redirect?url=https://naglinagli.github.io'

26 Mar 2021

b'HackerOne' disclosed a bug submitted by b'nagli' 
b'Stored XSS on https://events.hackerone.com'

26 Mar 2021

b'Open-Xchange' disclosed a bug submitted by b'northsea' 
b'Null pointer dereference in lib-sieve after calling sieve_binary_block_index'

26 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'ihsinme: CPP add query for: CPP Add query for CWE-20 Improper Input Validation '

25 Mar 2021

1 ... 189 190 191 192 193 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM