Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Blind Stored XSS on the internal host - '

16 Aug 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Unauthenticated arbitrary file upload on the https:/// ()'

16 Aug 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'orange' 
b'moderate: Apache HTTP Server: mod_rewrite proxy handler substitution (CVE-2024-39573) CWE-20 Improper Input Validation'

12 Aug 2024

b'RATELIMITED' disclosed a bug submitted by b'fdeleite' 
b'Subdomain takeover in GitLab Pages [george.ratelimited.me]'

11 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'XSS via /api/v1/chat.postMessage '

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Guest Privilege Escalation to admin group'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Upload of Avatars for other Users'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Online Status of arbitrary users can be changed'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'CSS Injection in Message Avatar'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Unread Messages can leak Message IDs'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Registration bypass with leaked Invite Token'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Unauthenticated clients can modify Livechat Business Hours'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Improper ACL in Message Starring'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'User Impersonation through sendMessage options'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Authentication Bypass in login-token Authentication Method'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Impersonation in Sequential Messages'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Content-Security Policy bypass with File Uploads'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'XSS in various MessageTypes'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'gronke' 
b'Pinning leaks message content'

10 Aug 2024

b'Rocket.Chat' disclosed a bug submitted by b'hackeriron1' 
b'Bypassing 2FA with conventional session management - open.rocket.chat'

10 Aug 2024

1 ... 23 24 25 26 27 ... 729

BY DENIS WERNER - @NOBBD - IMPRESSUM