Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'muon4' 
b'Used email confirmation link reveals the email address which is tied to it'

22 Sep 2021

b'HackerOne' disclosed a bug submitted by b'muon4' 
b'Race condition allows to send multiple times feedback for the hacker'

22 Sep 2021

b'Engel & V\xc3\xb6lkers Technology GmbH' disclosed a bug submitted by b'chaitanya_024' 
b'HTML Injection in Email'

22 Sep 2021

b'Brave Software' disclosed a bug submitted by b'kkarfalcon' 
b'Information disclosure'

21 Sep 2021

b'Valve' disclosed a bug submitted by b'hydraskyteam' 
b"Privilege Escalation vulnerability in steam's Remote Play feature leads to arbitrary kernel-mode driver installation"

21 Sep 2021

b'Valve' disclosed a bug submitted by b'bugstar' 
b'Big Picture web browser leaks login cookies and discloses sensitive information (may lead to account takeover)'

21 Sep 2021

b'Valve' disclosed a bug submitted by b'njbooher' 
b'Access to microtransaction sales data for lots of apps from 2014 to present at /valvefinance/sanity/'

21 Sep 2021

b'Moneybird' disclosed a bug submitted by b't3chnophil3' 
b'IDOR in https://moneybird.com/user/accountant_company/edit(change company name)'

21 Sep 2021

b'Moneybird' disclosed a bug submitted by b'bugera' 
b'Open Redirect through POST Request in OAuth'

21 Sep 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'ihsinme: Add query for CWE-758 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior'

20 Sep 2021

b'GitHub Security Lab' disclosed a bug submitted by b'vovohelo' 
b'New experimental query: Clipboard-based XSS'

20 Sep 2021

b'HackerOne' disclosed a bug submitted by b'frozensolid' 
b'Hacker can bypass minimum bounty amount restrictions in "invitation preferences" setting via UpdateInvitationPreferencesMutation GraphQL operation'

20 Sep 2021

b'XVIDEOS' disclosed a bug submitted by b'alone_test' 
b'Text injection or content spoofing on forbiden page'

19 Sep 2021

b'Basecamp' disclosed a bug submitted by b'nagli' 
b'Subdomain Takeover due to NS records at us-east4.37signals.com'

17 Sep 2021

b'Zomato' disclosed a bug submitted by b'ian' 
b'Subdomain takeover of fr1.vpn.zomans.com'

17 Sep 2021

b'Mattermost' disclosed a bug submitted by b'akashhamal0x01' 
b'Account takeover due to misconfiguration'

17 Sep 2021

b'Topcoder' disclosed a bug submitted by b'3viltwin' 
b'SSRF to AWS file read'

16 Sep 2021

b'Courier' disclosed a bug submitted by b'bugera' 
b'Session Fixiation allow attacker to create new evil workspace without being logged in [ Insecure Session management ]'

16 Sep 2021

b'Courier' disclosed a bug submitted by b'bugera' 
b'[3] Bypassing IP Based Rate Limit Blocking leads to rate limit bypass in Courier Login Panel'

16 Sep 2021

b'Zivver' disclosed a bug submitted by b'dhirenkumar8280' 
b'Bypassing Rate limit for forgot password by using different ip addresses'

15 Sep 2021

1 ... 206 207 208 209 210 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM