Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'z3ck3bug' 
b'{} It is posible download all information and files via S3 Bucket Misconfiguration'

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'zinminphy0' 
b'[SQLI ]Time Bassed Injection at via //library.php?c=G14 parameter'

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ofjaaah1' 
b'XSS Reflect to POST '

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmed12ossman' 
b'CORS misconfiguration which leads to the disclosure '

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'emad777' 
b'Unauthenticated Arbitrary File Deletion "CVE-2020-3187" in '

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'themastersunil' 
b'https:// vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD'

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mcbazza' 
b'Apparent website is publicly exposed, suggests default account details on page and has expired SSL/TLS cert'

23 Nov 2020

b'OPPO' disclosed a bug submitted by b'newbipath12' 
b'RXSS in https://store.oppomobile.com/'

23 Nov 2020

b'GitLab' disclosed a bug submitted by b'chromium1337' 
b'CRLF injection & SSRF in git:// protocal lead to arbitrary code execution'

23 Nov 2020

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'XSS on Issue reference numbers'

23 Nov 2020

b'Open-Xchange' disclosed a bug submitted by b'skr0x1c0' 
b'Blind SSRF in /appsuite/api/oxodocumentfilter&action=addfile'

23 Nov 2020

b'Open-Xchange' disclosed a bug submitted by b'skr0x1c0' 
b'XSS on opening a malicious OpenOffice text document'

23 Nov 2020

b'Open-Xchange' disclosed a bug submitted by b'skr0x1c0' 
b'XSS on opening malicious OpenOffice presentation document'

23 Nov 2020

b'FileZilla' disclosed a bug submitted by b'ayson88' 
b"FileZilla 3.46.3 - 'Scale factor' Buffer Overflow"

21 Nov 2020

b'GitLab' disclosed a bug submitted by b'mike12' 
b'Stored XSS in group issue list'

21 Nov 2020

b'Kubernetes' disclosed a bug submitted by b'mlevesquedion' 
b'kubeadm logs tokens before deleting them'

21 Nov 2020

b'Shopify' disclosed a bug submitted by b'vocotnhan' 
b'[Information Disclosure] Amazon S3 Bucket of Shopify Ping (iOS) have public access of other users image'

21 Nov 2020

b'GitLab' disclosed a bug submitted by b'vaib25vicky' 
b'Unauthorized access to private project security dashboard'

21 Nov 2020

b'PlayStation' disclosed a bug submitted by b'bugdiscloseguys' 
b'Access token stealing.'

21 Nov 2020

b'PlayStation' disclosed a bug submitted by b'nnez' 
b'Authorization Token on PlayStation Network Leaks via postMessage function'

21 Nov 2020

1 ... 225 226 227 228 229 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM