Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'brumens' 
b'Cache Posioning leading to denial of service at `` - Bypass fix from report #1198434\t'

13 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'POST based RXSS on https:/// via parameter'

13 Oct 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'letfornz' 
b'Path traversal on []'

13 Oct 2021

b'WakaTime' disclosed a bug submitted by b'mr_n0b3dy' 
b'HTML - injection '

12 Oct 2021

b'Mail.ru' disclosed a bug submitted by b'melbadry9' 
b'Open Redirect and CRLF Injection Leads to XSS on [app.doma.uchi.ru]'

12 Oct 2021

b'Acronis' disclosed a bug submitted by b'doosec101' 
b'Subdomain takeover of main domain of https://www.cyberlynx.lu/'

12 Oct 2021

b'Monero' disclosed a bug submitted by b'minerscan' 
b'Array Index Underflow--http rpc'

11 Oct 2021

b'Rocket.Chat' disclosed a bug submitted by b'wreiske' 
b'Custom crafted message object in Meteor.Call allows remote code execution and impersonation'

11 Oct 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java] CWE-200: Query to detect exposure of sensitive information from android file intent'

11 Oct 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Python] CWE-348: Client supplied ip used in security check'

11 Oct 2021

b'Fastify' disclosed a bug submitted by b'drstrnegth' 
b"1-click DOS in fastify-static via directly passing user's input to new URL() of NodeJS without try/catch"

11 Oct 2021

b'Fastify' disclosed a bug submitted by b'drstrnegth' 
b"Open redirect in fastify-static via mishandled user's input when attempt to redirect"

11 Oct 2021

b'GitLab' disclosed a bug submitted by b'joaxcar' 
b'Privilege escalation of "external user" (with maintainer privilege) to internal access through project token'

11 Oct 2021

b'Mail.ru' disclosed a bug submitted by b'melbadry9' 
b'CVE-2020-11110: Grafana Unauthenticated Stored XSS - grafana-lms.rsv.bizml.ru'

11 Oct 2021

b'Ubiquiti Inc.' disclosed a bug submitted by b'nih8l' 
b'XW 6.2.0 firmware: 5 Reflected XSS issues in link.cgi'

10 Oct 2021

b'Ubiquiti Inc.' disclosed a bug submitted by b'nih8l' 
b'3x Reflected XSS vectors for services.cgi (XM.v6.1.6, build 32290)'

10 Oct 2021

b'Kubernetes' disclosed a bug submitted by b'champtar' 
b'Man in the middle leading to root privilege escalation using hostNetwork=true (CAP_NET_RAW considered harmful)'

08 Oct 2021

b'Kubernetes' disclosed a bug submitted by b'lazydog' 
b'SSRF for kube-apiserver cloudprovider scene'

07 Oct 2021

b'Elastic' disclosed a bug submitted by b'fdeleite' 
b'CVE-2021-40870 on [52.204.160.31]'

06 Oct 2021

b'Zomato' disclosed a bug submitted by b'ashoka_rao' 
b'Improper Validation at Partners Login'

06 Oct 2021

1 ... 203 204 205 206 207 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM