Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'r0hack' 
b'IDOR to edit test/poll/quiz on relap.io'

23 Apr 2021

b'Mail.ru' disclosed a bug submitted by b'r0hack' 
b'IDOR to delete test/poll/quiz on relap.io'

23 Apr 2021

b'Mail.ru' disclosed a bug submitted by b'dvorakxl' 
b'Stored xss in calendar via call link'

23 Apr 2021

b'GitLab' disclosed a bug submitted by b'circuit' 
b'XSS in request approvals'

23 Apr 2021

b'Brave Software' disclosed a bug submitted by b'kanytu' 
b'Cookie steal through content Uri'

22 Apr 2021

b'Twitter' disclosed a bug submitted by b'a13h1' 
b'PI leakage By Brute Forcing and Phone number deleting without using password'

22 Apr 2021

b'Basecamp' disclosed a bug submitted by b'hensis' 
b'Lack of quarantine macOS attribute(com.apple.quarantine) leads multiple issues including RCE'

22 Apr 2021

b'PortSwigger Web Security' disclosed a bug submitted by b'ryotak' 
b"RCE in 'Copy as Node Request' BApp via code injection"

22 Apr 2021

b'Panther Labs' disclosed a bug submitted by b'run_win' 
b'Broken Link Hijacking on Twitter link'

22 Apr 2021

b'Homebrew' disclosed a bug submitted by b'ryotak' 
b'Broken parsing of Git diff allows an attacker to inject arbitrary Ruby scripts to Casks on official taps'

21 Apr 2021

b'Clario' disclosed a bug submitted by b'beerboy_ankit' 
b'Social media link hijack of team member [Linkedin] at https://mackeeper.com/team/'

21 Apr 2021

b'Ruby' disclosed a bug submitted by b'chinarulezzz' 
b"'net/ftp': Uncontrolled Resource Consumption (Memory/CPU)"

21 Apr 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'hacker_as980' 
b'CSRF in https://'

20 Apr 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'lu3ky-13' 
b'HTTP Request Smuggling '

20 Apr 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fiveguyslover' 
b'Administration Authentication Bypass on https://'

20 Apr 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'gentlemenhacker' 
b" portal is open to enumeration once authenticated. Session ID's appear static. All PII available once a valid session ID is found."

20 Apr 2021

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'RCE via unsafe inline Kramdown options when rendering certain Wiki pages'

20 Apr 2021

b'Nintendo' disclosed a bug submitted by b'mrnbayoh' 
b'[3DS][StreetPass] Buffer Overflow in Super Mario Maker level decompression'

20 Apr 2021

b'New Relic' disclosed a bug submitted by b'jon_bottarini' 
b'Stored XSS via malicious key value of Synthetics monitor tag when visiting an Insights dashboard with filtering enabled'

20 Apr 2021

b'Nextcloud' disclosed a bug submitted by b'stregh' 
b'bypassing dashboard without account + Information disclosure trough websockets '

20 Apr 2021

1 ... 234 235 236 237 238 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM