Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Sifchain' disclosed a bug submitted by b'bringing2021' 
b'Information Disclosure on https://rpc.sifchain.finance/'

15 May 2021

b'Uber' disclosed a bug submitted by b'beezlewaxin' 
b'private passenger information is exposed to the Uber Driver app during ride dispatch ("Ping") events'

14 May 2021

b'UPchieve' disclosed a bug submitted by b'zero_or_1' 
b'Zero click account Takeover due to Api misconfiguration '

14 May 2021

b'UPchieve' disclosed a bug submitted by b'saajanbhujel' 
b'Full account takeover of any user through reset password'

14 May 2021

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'RCE when removing metadata with ExifTool'

14 May 2021

b'8x8' disclosed a bug submitted by b'ian' 
b'Subdomain takeover of .jitsi.net'

14 May 2021

b'Uber' disclosed a bug submitted by b'hunt4p1zza' 
b'Request Access for Uber Device Returns Management Platform (https://www.eats-devicereturns.com/request-access/) Bypass Allows Access to PII'

14 May 2021

b'Sifchain' disclosed a bug submitted by b'himan253' 
b"No Valid SPF Records/don't have DMARC record"

14 May 2021

b'Uber' disclosed a bug submitted by b'hunt4p1zza' 
b'Unrestricted File Upload Results in Cross-Site Scripting Attacks'

14 May 2021

b'Uber' disclosed a bug submitted by b'bubbounty' 
b"Corss-Tenant IDOR on Business allowing escalation privilege, invitation takeover, and edition of any other Businesses' employees"

14 May 2021

b'Sifchain' disclosed a bug submitted by b'aliyugombe' 
b'No Rate Limit protection in user subscription form'

14 May 2021

b'Sifchain' disclosed a bug submitted by b'paranoid07' 
b'Found a url on source code which was disclosing different juicy informations like ip addresses and available endponts'

14 May 2021

b'Sifchain' disclosed a bug submitted by b'caon' 
b'Path Transversal inside saveContracts.js'

14 May 2021

b'Sifchain' disclosed a bug submitted by b'tmsm' 
b'Email spoofing'

13 May 2021

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Lack warning label when receiving a letter'

13 May 2021

b'HackerOne' disclosed a bug submitted by b'muon4' 
b'CSRF allows to test email forwarding'

13 May 2021

b'Sifchain' disclosed a bug submitted by b'immortalsurya' 
b'Cross Origin Resource Sharing Misconfiguration | Lead to sensitive information.'

13 May 2021

b'Sifchain' disclosed a bug submitted by b'ibrahimauwal1' 
b'Wordpress Users Disclosure (/wp-json/wp/v2/users/) on sifchain.finance'

13 May 2021

b'Sifchain' disclosed a bug submitted by b'itsme_ani' 
b'CORS Misconfiguration'

12 May 2021

b'Sifchain' disclosed a bug submitted by b'tefa_' 
b'Social media links not working'

12 May 2021

1 ... 233 234 235 236 237 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM