Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Azbuka Vkusa' disclosed a bug submitted by b'kerbyj' 
b' Cisco Smart Install'

16 Nov 2021

b'Glovo' disclosed a bug submitted by b'spaceboy20' 
b'chainning bugs to get full disclosure of Users addresses '

16 Nov 2021

b'Elastic' disclosed a bug submitted by b'dee-see' 
b'Fix for CVE-2021-22151 (Kibana path traversal issue) can be bypassed on Windows'

15 Nov 2021

b'Azbuka Vkusa' disclosed a bug submitted by b'adsec2s' 
b'Leak of Google Sheets API credentials'

15 Nov 2021

b'Azbuka Vkusa' disclosed a bug submitted by b'mkhazov' 
b'Corporate Jira credentials disclosed in public gist'

15 Nov 2021

b'Azbuka Vkusa' disclosed a bug submitted by b'sachin_kumar_' 
b"IDOR - Other user's delivery address disclosed"

15 Nov 2021

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Use of Ruby Forwardable module and runtime meta-programming may introduce vulnerabilities'

15 Nov 2021

b'GitLab' disclosed a bug submitted by b'doyensec' 
b'ReDoS in syntax highlighting due to Rouge'

15 Nov 2021

b'Informatica' disclosed a bug submitted by b'fdeleite' 
b'CVE-2021-40870 in []'

15 Nov 2021

b'ownCloud' disclosed a bug submitted by b'shell_c0de' 
b'Possible to steal any protected files on Android'

15 Nov 2021

b'PortSwigger Web Security' disclosed a bug submitted by b'cometome780' 
b'Information disclosure on error message'

15 Nov 2021

b'Acronis' disclosed a bug submitted by b'darkdream' 
b'Stored XSS in profile page'

14 Nov 2021

b'Panther Labs' disclosed a bug submitted by b'dhakal_bibek' 
b'Broken subdomain takeover of runpanther which was pointing towards herokuapp'

13 Nov 2021

b'U.S. General Services Administration' disclosed a bug submitted by b'7azimo' 
b'Unauthorized access to employee panel with default credentials.'

13 Nov 2021

b'GlassWire' disclosed a bug submitted by b'msvr' 
b'GlassWire 2.1.167 vulnerability - MSVR 56639'

13 Nov 2021

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'Drive-by arbitrary file deletion in the GDK via letter_opener_web gem'

12 Nov 2021

b'Slack' disclosed a bug submitted by b'jub0bs' 
b'Cross-site leak allows attacker to de-anonymize members of his team from another origin'

11 Nov 2021

b'Judge.me ' disclosed a bug submitted by b'cametome006' 
b'The response shows the nginx version'

11 Nov 2021

b'Concrete CMS' disclosed a bug submitted by b'byc_404' 
b'A bypass of adding remote files in concrete5 FIlemanager leads to remote code execution'

11 Nov 2021

b'New Relic' disclosed a bug submitted by b'mr-hakhak' 
b'Reflected XSS in VPN Appliance'

10 Nov 2021

1 ... 195 196 197 198 199 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM