Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Valve' disclosed a bug submitted by b'njbooher' 
b'/applications/dpc_(get|post) provide full access to api.steampowered.com with the Dota2 API key'

30 Jul 2024

b'Valve' disclosed a bug submitted by b'njbooher' 
b'WG call injection in /economy/contextcommand'

30 Jul 2024

b'Valve' disclosed a bug submitted by b'njbooher' 
b'RCE on partner.steampowered.com'

30 Jul 2024

b'Zomato' disclosed a bug submitted by b'suryesh_92' 
b'OTP Bypass via Response Manipulation'

30 Jul 2024

b'Shopify' disclosed a bug submitted by b'g0lden1' 
b'Exposure of shopify employee summit page allows anonymous user to place orders for free books'

29 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'renzi' 
b'Open Akamai ARL XSS on http://master-config-'

26 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'renzi' 
b'Open Akamai ARL XSS on http://media.'

26 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cleanchain50' 
b' (Android): Vulnerable to Javascript Injection and Open redirect'

26 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'martinvw' 
b'Subdomain takeover '

26 Jul 2024

b'Mozilla' disclosed a bug submitted by b'd0xing' 
b'Subdomain takeover on one of the subdomains under mozaws.net'

25 Jul 2024

b'Mozilla' disclosed a bug submitted by b'd0xing' 
b'Subdomain takeover on one of the subdomains under mozaws.net'

25 Jul 2024

b'curl' disclosed a bug submitted by b'z2_' 
b'CVE-2024-6197: freeing stack buffer in utf8asn1str'

24 Jul 2024

b'curl' disclosed a bug submitted by b'z2_' 
b'CVE-2024-6874: macidn punycode buffer overread'

24 Jul 2024

b'GitHub' disclosed a bug submitted by b'ahacker1' 
b'View private repository NWO of deploy key via internal LFS API'

23 Jul 2024

b'MercadoLibre' disclosed a bug submitted by b'madara_' 
b'Reflected Cross Site Scripting'

23 Jul 2024

b'HackerOne' disclosed a bug submitted by b'tedix' 
b'Payload delivery via Social Media urls on H1 profile'

23 Jul 2024

b'HackerOne' disclosed a bug submitted by b'akashhamal0x01' 
b'Non Org Admin/Group Manager can create groups in an organization'

23 Jul 2024

b'HackerOne' disclosed a bug submitted by b'iam_srpk' 
b'Minor security issue with Hackerone Invitations from sandbox program'

22 Jul 2024

b'Nintendo' disclosed a bug submitted by b'lnchan' 
b'Arbitrary code execution in TSEC Heavy Secure, return-oriented programming in TSEC Secure ROM, and recovery of TSEC-derived cryptographic secrets'

22 Jul 2024

b'TikTok' disclosed a bug submitted by b'696e746c6f6c' 
b'Exploitable live argument in onClick Function leads to Data Leakage of Inactive/Suspended Products'

19 Jul 2024

1 ... 20 21 22 23 24 ... 724

BY DENIS WERNER - @NOBBD - IMPRESSUM