Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Twitter' disclosed a bug submitted by b'mirhat' 
b"Ability to add arbitrary images/descriptions/titles to ohter people's issues via IDOR on getrevue.co"

26 May 2021

b'TikTok' disclosed a bug submitted by b'probatorem' 
b'CSRF on TikTok Ads Portal'

26 May 2021

b'Helium' disclosed a bug submitted by b'th0roid' 
b'SSRF By adding a custom integration on console.helium.com'

26 May 2021

b'Mail.ru' disclosed a bug submitted by b'tounsi_007' 
b'Account takeover on [support2.ucs.ru]'

26 May 2021

b'Mail.ru' disclosed a bug submitted by b'aapo' 
b' Disk-o Cloud application (Windows) does not validate server certificate on a TLS connection'

26 May 2021

b'Mail.ru' disclosed a bug submitted by b'bombon' 
b'[https://geekbrains.ru/profile] - authenticity_token not tied to user session leads to CSRF attacks'

26 May 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Talk discloses turn server to anybody'

26 May 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Nextcloud deck sharee search leaks searches to lookupserver by default'

26 May 2021

b'Mail.ru' disclosed a bug submitted by b'igorpyan' 
b'[com.icq.mobile.client] '

26 May 2021

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2021-22901: TLS session caching disaster'

26 May 2021

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2021-22898: TELNET stack contents disclosure'

26 May 2021

b'curl' disclosed a bug submitted by b'nyymi' 
b'CVE-2021-22897: schannel cipher selection surprise'

26 May 2021

b'Mail.ru' disclosed a bug submitted by b'0nlymohammed' 
b'Development configurations file with a sensitive data exposure could be leads to take down the social media accounts and the DB'

25 May 2021

b'Mail.ru' disclosed a bug submitted by b'organdonor' 
b'Blind SQL injection on [city-mobil.ru/taxiserv/] in filter{"id_locality"}'

25 May 2021

b'Mail.ru' disclosed a bug submitted by b'organdonor' 
b'Blind SQL in id_locality GET param on [city-mobil.ru/taxiserv]'

25 May 2021

b'Mail.ru' disclosed a bug submitted by b'alexeysergeevich' 
b'[la.mail.ru] - SSRF + cookie'

25 May 2021

b'Kaspersky' disclosed a bug submitted by b'hacker-yadav' 
b'No Rate Limit On Forgot Password Page'

24 May 2021

b'New Relic' disclosed a bug submitted by b'itsz4x' 
b'HTML Injection In Email In one.newrelic.com'

24 May 2021

b'Mail.ru' disclosed a bug submitted by b'yukusawa18' 
b'Debug Mode Leak Critical Information [ AWS Keys , SMTP , Database , Django Secret Key ( RCE ) , Dodoc , Telegram , Twilio .. ]'

24 May 2021

b'GitLab' disclosed a bug submitted by b'saltyyolk' 
b'Arbitrary file read during project import'

24 May 2021

1 ... 198 199 200 201 202 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM