Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ozon' disclosed a bug submitted by b'mrdruid' 
b'DOM XSS learning.ozon.ru'

28 May 2021

b'TikTok' disclosed a bug submitted by b'sandipgyawali' 
b'Blocked user can see live video'

28 May 2021

b'Uber' disclosed a bug submitted by b'0xprial' 
b'IDOR leads to See analytics of Loyalty Program in any restaurant.'

28 May 2021

b'VK.com' disclosed a bug submitted by b'bagipro' 
b'[VK Android] Access to app protected components leads to arbitrary code execution'

27 May 2021

b'Kubernetes' disclosed a bug submitted by b'javierprovecho' 
b'Bypass apiserver proxy filter'

27 May 2021

b'Valve' disclosed a bug submitted by b'chaynik' 
b'RCE on CS:GO client using unsanitized entity ID in EntityMsg message'

27 May 2021

b'Valve' disclosed a bug submitted by b'chaynik' 
b'Signedness issue in ClassInfo message handler leads to RCE on CS:GO client'

27 May 2021

b'OpenMage' disclosed a bug submitted by b'xenx' 
b'CSRF in changing password after using reset password link'

27 May 2021

b'MariaDB' disclosed a bug submitted by b'dtattoedhackers' 
b'Git Config'

27 May 2021

b'PlayStation' disclosed a bug submitted by b'm00nbsd' 
b'SMAP bypass'

27 May 2021

b'Twitter' disclosed a bug submitted by b'mirhat' 
b"Ability to add arbitrary images/descriptions/titles to ohter people's issues via IDOR on getrevue.co"

26 May 2021

b'TikTok' disclosed a bug submitted by b'probatorem' 
b'CSRF on TikTok Ads Portal'

26 May 2021

b'Helium' disclosed a bug submitted by b'th0roid' 
b'SSRF By adding a custom integration on console.helium.com'

26 May 2021

b'Mail.ru' disclosed a bug submitted by b'tounsi_007' 
b'Account takeover on [support2.ucs.ru]'

26 May 2021

b'Mail.ru' disclosed a bug submitted by b'aapo' 
b' Disk-o Cloud application (Windows) does not validate server certificate on a TLS connection'

26 May 2021

b'Mail.ru' disclosed a bug submitted by b'bombon' 
b'[https://geekbrains.ru/profile] - authenticity_token not tied to user session leads to CSRF attacks'

26 May 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Talk discloses turn server to anybody'

26 May 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Nextcloud deck sharee search leaks searches to lookupserver by default'

26 May 2021

b'Mail.ru' disclosed a bug submitted by b'igorpyan' 
b'[com.icq.mobile.client] '

26 May 2021

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2021-22901: TLS session caching disaster'

26 May 2021

1 ... 194 195 196 197 198 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM