Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'QIWI' disclosed a bug submitted by b'nowsafe' 
b'account impersonate through broken link'

04 Jun 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'x3ph_' 
b'Insufficient Session Expiration on Adobe Connect | https://'

03 Jun 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'CVE-2019-3403 on https:///rest/api/2/user/picker?query='

03 Jun 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'1337n0x' 
b'Blind SQL iNJECTION '

03 Jun 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fdeleite' 
b'Reflected XSS'

03 Jun 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fr1nge' 
b'Web Cache Poisoning on '

03 Jun 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Remote Code Execution via Insecure Deserialization in Telerik UI (CVE-2019-18935)'

03 Jun 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Reflected XSS at www. at / via the parameter'

03 Jun 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'Reflected XSS through clickjacking at https://'

03 Jun 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'thiennv' 
b'Reflected XSS on https://'

03 Jun 2021

b'Rockstar Games' disclosed a bug submitted by b'ak1t4' 
b'XSS STORED AT socialclub.rockstargames.com (add friend request from profile attacker)'

03 Jun 2021

b'Revive Adserver' disclosed a bug submitted by b'solov9ev' 
b'Reflected XSS on /admin/stats.php'

03 Jun 2021

b'Mattermost' disclosed a bug submitted by b'hulkvision_' 
b'Persistant Arbitrary code execution in mattermost android'

03 Jun 2021

b'Nextcloud' disclosed a bug submitted by b'icewater' 
b'SSL certificate not validated when registering with a provider'

02 Jun 2021

b'Nextcloud' disclosed a bug submitted by b'demonia' 
b"DoS due to improper input validation can break the admin access into the user data will disallow him from editing that user's data."

01 Jun 2021

b'Nextcloud' disclosed a bug submitted by b'kesselb' 
b'Take over a mail account due missing validation of account id'

01 Jun 2021

b'Showmax' disclosed a bug submitted by b'mdakh404' 
b'xmlrpc.php is publicly available at https://stories.showmax.com/xmlrpc.php'

01 Jun 2021

b'Nextcloud' disclosed a bug submitted by b'kesselb' 
b'Create alias does not validate account id'

01 Jun 2021

b'Nextcloud' disclosed a bug submitted by b'rtod' 
b'Default Nextcloud server config and iOS Nextcloud client leak sharee searches to Nextcloud'

31 May 2021

b'Palo Alto Software' disclosed a bug submitted by b'ian' 
b'Subdomain takeover of www2.growasyouplan.com'

29 May 2021

1 ... 230 231 232 233 234 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM