Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Sifchain' disclosed a bug submitted by b'ic4' 
b'CORS (Cross-Origin Resource Sharing) origin validation failure -Any website can issue requests made with user credentials and read the responses to th'

10 Jun 2021

b'Sifchain' disclosed a bug submitted by b'za_sec' 
b'Private eth key found'

10 Jun 2021

b'Sifchain' disclosed a bug submitted by b'zelzal' 
b'HTTPS not enforced at dex.sifchain.finance'

10 Jun 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'File drop public link can also be converted to federated share'

10 Jun 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Attacker can obtain write access to any federated share/public link'

10 Jun 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Default settings leak federated cloud id to lookup server of all users'

10 Jun 2021

b'Acronis' disclosed a bug submitted by b'sbakhour' 
b'Stored XSS in Acronis Cyber Protect Console'

10 Jun 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'End to end encryption folder locking is not properly protected'

10 Jun 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Trusted servers exchange can be triggered by attacker'

10 Jun 2021

b'UPchieve' disclosed a bug submitted by b'riski0912' 
b'CORS Misconfiguration, could lead to disclosure of sensitive information'

09 Jun 2021

b'Slack' disclosed a bug submitted by b'showuon' 
b'Header modification results in disclosure of Slack infra metadata to unauthorized parties'

09 Jun 2021

b'HackerOne' disclosed a bug submitted by b'h13-' 
b'Private program disclosure of `` through notifications'

09 Jun 2021

b'MTN Group' disclosed a bug submitted by b'droop3r' 
b'Cross-Site Scripting through search form on mtnplay.co.zm'

08 Jun 2021

b'Showmax' disclosed a bug submitted by b'abdulsec' 
b'bypass parental pin succesfully'

07 Jun 2021

b'Showmax' disclosed a bug submitted by b'abhiram' 
b'https://secure.showmax.com/profile/payments'

07 Jun 2021

b'Mail.ru' disclosed a bug submitted by b'impalanichamy' 
b'Acessed internal api documentation and information'

06 Jun 2021

b'Mail.ru' disclosed a bug submitted by b'mvm' 
b'XSS (reflected, and then, cookie persisted) on api documentation site theme selector (old version of dokuwiki)'

06 Jun 2021

b'Mail.ru' disclosed a bug submitted by b'a1c3venomvirus' 
b'prometheus server monitoring System publicly accessible'

06 Jun 2021

b'Shopify' disclosed a bug submitted by b'jmp_35p' 
b'Add new development stores without permission'

04 Jun 2021

b'GlassWire' disclosed a bug submitted by b'dawouw' 
b'Uncontrolled Search Path Element allows DLL hijacking for priv esc to SYSTEM'

04 Jun 2021

1 ... 229 230 231 232 233 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM