Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'elmahdi' 
b'Redmin API Key Exposed In GIthub '

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'sicksec' 
b'Access User Tickets via IDOR in [widget.support.my.games]'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'sodium_' 
b'the same as #948259 - XSS at jsgames.mail.ru'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'steal_wart' 
b'Information Disclosure '

25 Nov 2020

b'BugPoC' disclosed a bug submitted by b'virenpawar' 
b'Solution to the XSS Challenge '

24 Nov 2020

b'Helium' disclosed a bug submitted by b'eissen5c' 
b'Hyperlink Injection on Email Invitation'

24 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'balisong' 
b' SharePoint Web Services Exposed to Anonymous Access'

24 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'balisong' 
b' SharePoint Web Services Exposed to Anonymous Access'

24 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'moloshy' 
b'Local File Inclusion In Registration Page'

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'silentbreach' 
b'View another user information with IDOR vulnerability '

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'Reflected XSS on https:/// (Bypass of #1002977)'

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'z3ck3bug' 
b'{} It is posible download all information and files via S3 Bucket Misconfiguration'

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'zinminphy0' 
b'[SQLI ]Time Bassed Injection at via //library.php?c=G14 parameter'

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ofjaaah1' 
b'XSS Reflect to POST '

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmed12ossman' 
b'CORS misconfiguration which leads to the disclosure '

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'emad777' 
b'Unauthenticated Arbitrary File Deletion "CVE-2020-3187" in '

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'themastersunil' 
b'https:// vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD'

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mcbazza' 
b'Apparent website is publicly exposed, suggests default account details on page and has expired SSL/TLS cert'

23 Nov 2020

b'OPPO' disclosed a bug submitted by b'newbipath12' 
b'RXSS in https://store.oppomobile.com/'

23 Nov 2020

b'GitLab' disclosed a bug submitted by b'chromium1337' 
b'CRLF injection & SSRF in git:// protocal lead to arbitrary code execution'

23 Nov 2020

1 ... 244 245 246 247 248 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM