Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nidens' 
b' IDOR leads to disclosure of PHI/PII'

18 Feb 2021

b'Mail.ru' disclosed a bug submitted by b'0ang3el' 
b'Stored XSS in calendar via UID parameter'

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Password Cracking - Weak Password Used to Secure Containing a Plaintext Password'

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Access to requests and approvals via / allows sensitive information gathering'

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'PII Leak via /'

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'PII Leak via /'

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'PII Leak via /'

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Dashboard sharing enables code injection into emails'

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Arbitrary file upload and stored XSS via support request'

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Support incident can be opened for any user via / and PII leak via field'

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Knowledge Base Articles are Globally Modifiable via '

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Second Order XSS via '

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Improper Access Controls Allow PII Leak via '

18 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mad_phoenix' 
b'CVE 2020 14179 on jira instance '

18 Feb 2021

b'Rockstar Games' disclosed a bug submitted by b'bugstar' 
b'Open redirect on https://signin.rockstargames.com/connect/authorize/rsg'

18 Feb 2021

b'Algolia' disclosed a bug submitted by b'exploit_db' 
b'email verification bypass'

18 Feb 2021

b'Mail.ru' disclosed a bug submitted by b'ar-arvind' 
b'Google API Key is not restricted for specific application package name and signature [Mail.ru Cloud for Android]'

18 Feb 2021

b'Clario' disclosed a bug submitted by b'akash-labade' 
b'No rate Limit on Licenses Activation '

18 Feb 2021

b'Zomato' disclosed a bug submitted by b'prateek_0490' 
b'[www.zomato.com] Leaking PIIs (All Email Addresses) Of All Zomato Users'

18 Feb 2021

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-522: Insecure LDAP authentication '

17 Feb 2021

1 ... 220 221 222 223 224 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM