Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'TikTok' disclosed a bug submitted by b'dphoeniixx' 
b'Multiple bugs leads to RCE on TikTok for Android'

17 Mar 2021

b'pixiv' disclosed a bug submitted by b'chaosbolt' 
b'RCE due to ImageTragick v2'

16 Mar 2021

b'Revive Adserver' disclosed a bug submitted by b'solov9ev' 
b'Reflected XSS on /admin/stats.php'

16 Mar 2021

b'Revive Adserver' disclosed a bug submitted by b'solov9ev' 
b'Reflected XSS on /admin/campaign-zone-zones.php'

16 Mar 2021

b'Acronis' disclosed a bug submitted by b'adr' 
b'Arbitrary file creation via symlink attack on syncagentsrv (Acronis Sync Agent Service)'

16 Mar 2021

b'Acronis' disclosed a bug submitted by b'bughunter98' 
b'Unrestricted file upload vulnerability in IMCE'

16 Mar 2021

b'Acronis' disclosed a bug submitted by b'ashishmurugan' 
b'ClickJacking'

16 Mar 2021

b'GitLab' disclosed a bug submitted by b'muthu_prakash' 
b'Revoked User can still view the Merge Request created by him via API'

15 Mar 2021

b'Uber' disclosed a bug submitted by b'healdb' 
b'SQLI on uberpartner.eu leads to exposure of sensitive user data of Uber partners'

15 Mar 2021

b'Uber' disclosed a bug submitted by b'samux' 
b'Reflected XSS on https://www.uber.com '

15 Mar 2021

b'Uber' disclosed a bug submitted by b'healdb' 
b'Lack of CSRF protection on uberps.com makes every form vulnerable to CSRF'

15 Mar 2021

b'Uber' disclosed a bug submitted by b'healdb' 
b'Access to SQL server of ubergreen.pt through password disclosure from different domain on same IP'

15 Mar 2021

b'Uber' disclosed a bug submitted by b'healdb' 
b'Unsecured Dropwizard Admin Panel on display.uber-adsystem.com exposes sensitive server information'

15 Mar 2021

b'Twitter' disclosed a bug submitted by b'm7mdharoun' 
b'2 Subdomains Takeover at readfu.com'

15 Mar 2021

b'Node.js' disclosed a bug submitted by b'omicronenergy' 
b"HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion"

15 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'derision' 
b'SQL Injection at https://lite.r-keeper.ru/site_api/localize/translate/rklscommon/ru'

14 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'moshakes' 
b'Exposed Git Repo at https://mini-app.delivery-club.ru'

14 Mar 2021

b'Kartpay' disclosed a bug submitted by b'bugera' 
b'Duplicate Entry of email leads to 500 Server Error which disclosing the SQL Database table information'

14 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'cutoffurmind' 
b'MCS Graphite SSRF: internal network access'

13 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'darknight776' 
b'Subdomain takeover http://promo.instamart.ru/'

13 Mar 2021

1 ... 216 217 218 219 220 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM