Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Automattic' disclosed a bug submitted by b'ajay_saycure' 
b'Able to comment/view in others support ticket at https://en.instagram-brand.com/requests/dashboard'

05 Dec 2020

b'curl' disclosed a bug submitted by b'1wc' 
b'An integer overflow found in /lib/urlapi.c'

05 Dec 2020

b'curl' disclosed a bug submitted by b'snsn' 
b'curl overwrite local file with -J'

05 Dec 2020

b'curl' disclosed a bug submitted by b'mszpl' 
b'Partial password leak over DNS on HTTP redirect'

05 Dec 2020

b'OpenVPN' disclosed a bug submitted by b'jub0bs' 
b'Some build dependencies are downloaded over an insecure channel (without subsequent integrity checks)'

04 Dec 2020

b'PlayStation' disclosed a bug submitted by b'parsiya' 
b"Websites Can Run Arbitrary Code on Machines Running the 'PlayStation Now' Application"

04 Dec 2020

b'Stripo Inc' disclosed a bug submitted by b'binit' 
b'Non-revoked API Key Disclosure in a Disclosed API Key Disclosure Report on Stripo'

04 Dec 2020

b'Basecamp' disclosed a bug submitted by b'babykeem' 
b'SSL expired subdomain leads to API swap with main and flagged cookies. Unable to log device ids and certain session tokens. '

03 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'jayesh25' 
b'Improper Restriction of Excessive Authentication Attempts at https://ucs.ru/login'

03 Dec 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'al-madjus' 
b'Leaked DB credentials on https://.mil/'

03 Dec 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'CSRF to Stored HTML injection at https://www.'

03 Dec 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'PII Leak of USCG Designated Examiner List at https://www.'

03 Dec 2020

b'Kubernetes' disclosed a bug submitted by b'kittytrace' 
b'Development Application Credentials + Information Exposed'

03 Dec 2020

b'Basecamp' disclosed a bug submitted by b'foobar7' 
b'Bypass of image rewriting / tracking blocker via srcset'

03 Dec 2020

b'Automattic' disclosed a bug submitted by b'haqsek2' 
b'Email Verification bypass on signup'

03 Dec 2020

b'Kubernetes' disclosed a bug submitted by b'piqin' 
b'csi-snapshot-controller crashes when processing VolumeSnapshot with non-existing PVC'

03 Dec 2020

b'Node.js third-party modules' disclosed a bug submitted by b'asgerf' 
b'[chart.js] Prototype pollution'

02 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'alexeysergeevich' 
b'stored xss + .'

02 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[smena.samokat.ru] Predictable JWT secret'

02 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'chaosbolt' 
b'[ICQ] nwwwstg-d01.ops.icq.com check mk agent exposed to public'

02 Dec 2020

1 ... 222 223 224 225 226 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM