Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'retat4' 
b'Bypass comment restriction'

19 Sep 2024

b'MTN Group' disclosed a bug submitted by b'reachaxis' 
b'IDOR Leads To User Profile Modification https://mtnmobad.mtnbusiness.com.ng/app/updateUser'

18 Sep 2024

b'GitLab' disclosed a bug submitted by b'pwnprincess' 
b'Removed Guest role user who dosent have access to private project in members able to view jobs '

18 Sep 2024

b'Brave Software' disclosed a bug submitted by b'jayateerthag' 
b'Brave Android: Incorrect URL Eliding in Brave Shields Pop Up'

18 Sep 2024

b'GitHub' disclosed a bug submitted by b'inspector-ambitious' 
b'Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in ghe-update-check'

17 Sep 2024

b'GitHub' disclosed a bug submitted by b'inspector-ambitious' 
b"RC Between GitHub's Repo Update REST API and updateTeamsRepository GraphQL Mutation Results in Covert and Persistent Admin Access Retention"

17 Sep 2024

b'GitHub' disclosed a bug submitted by b'inspector-ambitious' 
b'Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in collectd'

17 Sep 2024

b'GitHub' disclosed a bug submitted by b'inspector-ambitious' 
b'Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in actions-console'

17 Sep 2024

b'HackerOne' disclosed a bug submitted by b'jay' 
b'Private draft report exposure in a program a user is added as a viewer to'

17 Sep 2024

b'nullsec VDP' disclosed a bug submitted by b'callmed0_4' 
b' Test by HDR'

16 Sep 2024

b'mycompany VDP' disclosed a bug submitted by b'gmaerx' 
b'This test report has been disclosed by 20_root. If you are a traiger looking at this report Act ASAP.'

16 Sep 2024

b'MTN Group' disclosed a bug submitted by b'reachaxis' 
b'Authentication Bypass Leads To Complete Account TakeveOver on '

14 Sep 2024

b'GitHub' disclosed a bug submitted by b'inspector-ambitious' 
b'Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection and audit-forward'

13 Sep 2024

b'GitHub' disclosed a bug submitted by b'inspector-ambitious' 
b'Privilege Escalation to Root SSH Access via Pre-Receive Hook Environment in GitHub Enterprise Server'

13 Sep 2024

b'GitHub' disclosed a bug submitted by b'inspector-ambitious' 
b'Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection'

13 Sep 2024

b'GitHub' disclosed a bug submitted by b'inspector-ambitious' 
b'Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in syslog-ng'

13 Sep 2024

b'Adobe' disclosed a bug submitted by b'0xhuntress' 
b'Unauthenticated Varnish Cache Purge'

12 Sep 2024

b'curl' disclosed a bug submitted by b'kurohiro' 
b'CVE-2024-8096: OCSP stapling bypass with GnuTLS'

11 Sep 2024

b'MTN Group' disclosed a bug submitted by b'alitoni224' 
b'cross site scripting reflected '

09 Sep 2024

b'MercadoLibre' disclosed a bug submitted by b'valent1ne' 
b'Stored XSS in reclamos'

09 Sep 2024

1 2 3 4 5 ... 711

BY DENIS WERNER - @NOBBD - IMPRESSUM