REPORTS
PROGRAMS
PUBLISHERS
Top10 publishers:
b'bobrov'
117
b'sp1d3rs'
86
b'geeknik'
80
b'linkks'
75
b'jobert'
70
b'someonenobbd'
62
b'nyymi'
56
b'ooooooo_q'
50
b'jon_bottarini'
49
b'haxta4ok00'
48
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'sp1d3rs'
b'[HTAF4-213] [Pre-submission] XSS via arbitrary cookie name at the https://www2./nssi/core/dot_stu_reg/Registration.aspx'
18 Jun 2024
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'adam_wallwork'
b'CVE-2021-39226 Discovered on endpoint https:///api/snapshots'
18 Jun 2024
b'curl'
disclosed a bug submitted by
b'splitline'
b'Unicode-to-ASCII conversion on Windows can lead to argument injection and more'
18 Jun 2024
b'curl'
disclosed a bug submitted by
b'z3r0yu'
b'Incorrect Encoding Conversion in hostname results in indeterminate SSRF vulnerabilities'
18 Jun 2024
b'curl'
disclosed a bug submitted by
b'stux3net08'
b'Denial of Service in curl Request - HTTP headers eat all memory'
18 Jun 2024
b'Nextcloud'
disclosed a bug submitted by
b'mohs3n'
b'see card comments after remove shared board'
18 Jun 2024
b'HackerOne'
disclosed a bug submitted by
b'akashhamal0x01'
b'Access Control Vulnerability Enabling Unauthorized Access to Limited Disclosure Reports'
17 Jun 2024
b'Mozilla'
disclosed a bug submitted by
b'erdy'
b'Account deletion using the /v1/account/destroy API endpoint using account password without 2FA verification'
17 Jun 2024
b'Drugs.com'
disclosed a bug submitted by
b'akhan8041'
b'Email OTP/2FA Bypass'
16 Jun 2024
b'Nextcloud'
disclosed a bug submitted by
b'section1'
b'Events information leaked with shared calendars on recurrence exceptions'
14 Jun 2024
b'Nextcloud'
disclosed a bug submitted by
b'7h3b4dg3r'
b'Read-only users can restore old versions'
14 Jun 2024
b'Nextcloud'
disclosed a bug submitted by
b'lourcode'
b'Code injection in Nextcloud Desktop Client for macOS'
14 Jun 2024
b'HackerOne'
disclosed a bug submitted by
b'nagli'
b'[Spot Check] - Ability to disclose metadata about Spot Checks (Number of Hackers + Hackers Criteria) via "SpotCheckSingleQuery"'
11 Jun 2024
b'HackerOne'
disclosed a bug submitted by
b'youstin'
b"[ Spot Check ] Team members can edit a user's write-up"
06 Jun 2024
b'EXNESS'
disclosed a bug submitted by
b'alexandrio'
b'GraphQL attribute Batching DOS can take down pwapi.ex2b.com'
04 Jun 2024
b'WakaTime'
disclosed a bug submitted by
b'hasn0x'
b'IDOR to view order information of users and personal information'
02 Jun 2024
b'Basecamp'
disclosed a bug submitted by
b'fr4via'
b'Account takeover via insecure intent handling '
30 May 2024
b'HackerOne'
disclosed a bug submitted by
b'zy9ard3'
b"[hackerone.com] Program's old handles are not blacklisted like usernames and allows reclaim over past handles for potential abuse"
30 May 2024
b'Nextcloud'
disclosed a bug submitted by
b'lukasreschke'
b'user_oidc allows registering new accounts by going through ID4Me flow'
30 May 2024
b'Internet Bug Bounty'
disclosed a bug submitted by
b'iylz'
b'Proxy-Authorization header not cleared on cross-origin redirect in undici.request'
29 May 2024
1
...
19
20
21
22
23
...
717
BY DENIS WERNER - @NOBBD -
IMPRESSUM