Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bulldawg' 
b'Authentication Bypass on https:///'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01' 
b'IDOR leads to PII Leak'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01' 
b'IDOR leads to view other user Biographical details (Possible PII LEAK)'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01' 
b'IDOR : Modify other users demographic details'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bulldawg' 
b'Automatic Admin Access'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bulldawg' 
b'Endpoint Redirects to Admin Page and Provides Admin role'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'tokyoenigma' 
b'Local File Inclusion in download.php'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'maskedpersian' 
b'XML External Entity (XXE) Injection'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01' 
b'Email Takeover leads to permanent account deletion'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'prakhar0x01' 
b'Restrict any user from Login to their account'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bulldawg' 
b'Missing Access Control Allows for User Creation and Privilege Escalation '

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Unauthenticated arbitrary file upload on the https:/// (.mil)'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'matrixsoftsec' 
b'Unauthenticated access to internal API at..edu [HtUS]'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'XXE with RCE potential on the https:// (CVE-2017-3548)'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Authentication bypass and potential RCE on the https:// due to exposed Cisco TelePresence SX80 with default credentials'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Unauth IDOR to mass account takeover without user interaction on the (https://.edu/)'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xtrav' 
b'Self XSS'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'[CVE-2018-0296] Cisco VPN path traversal on the https:// ()'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'[CVE-2018-0296] Cisco VPN path traversal on the https:/// (no hostname)'

19 Jul 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'[CVE-2018-0296] Cisco VPN path traversal on the https:/// ()'

19 Jul 2024

1 ... 21 22 23 24 25 ... 724

BY DENIS WERNER - @NOBBD - IMPRESSUM