Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'lu3ky-13' 
b'CSRF to Cross-site Scripting (XSS)'

24 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'bughunterlabs' 
b'[CVE-2018-7600] Remote Code Execution due to outdated Drupal server on www.'

24 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'jin0ne' 
b'Bypass the reverse proxy. Request admin'

24 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'01alsanosi' 
b' unauthorized Access To Elastic DB '

22 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'login-denied' 
b'XSS via POST request to https://account.mail.ru/signup/'

20 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'sharmaz' 
b'mail.ru/touch xss(r) debug parameter'

20 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'complex' 
b'o2.mail.ru XSS'

20 Mar 2021

b'Bitso' disclosed a bug submitted by b'mohit0786' 
b'Broken link hijack'

20 Mar 2021

b'TikTok' disclosed a bug submitted by b'nagli' 
b'HTML Injection through Account Name field on TikTok ads portal being rendered on emails'

19 Mar 2021

b'Lark Technologies' disclosed a bug submitted by b'jin0ne' 
b'Reflected XSS on Lark Suite'

19 Mar 2021

b'Zivver' disclosed a bug submitted by b'stiltz' 
b'Bypass MFA requirement to send messages'

19 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'neex' 
b'file read on MCS servers via supplying a QCOW2 image with external backing file'

19 Mar 2021

b'Mattermost' disclosed a bug submitted by b'stregh' 
b'[mattermost.com] CORS Misconfiguration leakage of admin users'

19 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[city-mobil.ru/taxiserv/] SQLi at /taxiserv/requests path at driver_company param'

19 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[city-mobil.ru/taxiserv/] SQLi at /taxiserv/tariffs/dictionary at filter{"id_locality"} param'

19 Mar 2021

b'Dropbox' disclosed a bug submitted by b'wesamahmed_2' 
b'[www.dropboxforum.com] - reflected XSS in search'

19 Mar 2021

b'Lark Technologies' disclosed a bug submitted by b'jin0ne' 
b'Server Side Request Forgery'

18 Mar 2021

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'Stored Cross-Site Scripting vulnerability in example Custom Digital Agreement'

18 Mar 2021

b'HackerOne' disclosed a bug submitted by b'sodium_' 
b'"Bounty splitting enabled" can discloses if public VDPs are running private VRP'

18 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'sniper302' 
b'Full Account Takeover Student Account In https://uchi.ru/signin/main/student/email'

18 Mar 2021

1 ... 219 220 221 222 223 ... 746

BY DENIS WERNER - @NOBBD - IMPRESSUM