Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'FetLife' disclosed a bug submitted by b'deepblue29' 
b'Able to see highest poll result without voting or view result'

15 Nov 2023

b'Mars' disclosed a bug submitted by b'skoll101' 
b'debug.log File Exposure that exposes (user/) username and password at '

15 Nov 2023

b'Mars' disclosed a bug submitted by b'skoll101' 
b'subdomain takeover at '

15 Nov 2023

b'Mars' disclosed a bug submitted by b'bx00' 
b'**"CSRF Vulnerability in Royal Canin Website Allows Attackers to Change User Profile Picture at my.royalcanin.pt"**'

15 Nov 2023

b'Automattic' disclosed a bug submitted by b'secureighty' 
b'reflected xss in https://wordpress.com/start/account/user'

15 Nov 2023

b'curl' disclosed a bug submitted by b'cyberguardianrd' 
b'Buffer overflow and affected url:-https://github.com/curl/curl/blob/master/docs/examples/hsts-preload.c'

15 Nov 2023

b'Nextcloud' disclosed a bug submitted by b'rullzer' 
b'OAuth2 client_secret stored in plain text in the database'

15 Nov 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'suzuka' 
b'Yet Another CASB Integration Takeover of Active Integrations'

13 Nov 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'balis0ng' 
b'CVE-2023-42663: Apache Airflow: Bypass permission verification to view task instances of other dags'

13 Nov 2023

b'Mozilla Core Services' disclosed a bug submitted by b'mikey96' 
b'Subdomain takeover on one of the subdomain under mozgcp.net'

12 Nov 2023

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing' 
b'Subdomain takeover on one of the subdomain under mozgcp.net'

12 Nov 2023

b'Mozilla Core Services' disclosed a bug submitted by b'd0xing' 
b'Subdomain takeover on one of the subdomain under mozgcp.net'

12 Nov 2023

b'Nextcloud' disclosed a bug submitted by b'nickvergessen' 
b'Password of talk conversations can be bruteforced'

12 Nov 2023

b'Nextcloud' disclosed a bug submitted by b'nickvergessen' 
b'Memcached used as RateLimiter backend is no-op'

12 Nov 2023

b'Daimler Truck' disclosed a bug submitted by b'1smael0liveira' 
b'CSRF + XSS REFLECT'

10 Nov 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'hacker_t_dog' 
b'Bypass R2 payment screen'

10 Nov 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'aliend89' 
b'YAML schema injection risk in Swagger UI via schema_url parameter at developers.cloudflare.com'

10 Nov 2023

b'ownCloud' disclosed a bug submitted by b'pascal_geuter' 
b'Cross-Site Request Forgery '

05 Nov 2023

b'HackerOne' disclosed a bug submitted by b'bebiks' 
b'Google Docs link in JS files allows editing & reading survey information'

04 Nov 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sufatmawati' 
b'[] Information disclosure due unauthenticated access to APIs and system browser functions'

03 Nov 2023

1 2 3 4 5 ... 680

BY DENIS WERNER - @NOBBD - IMPRESSUM