Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Sheer' disclosed a bug submitted by b'tuannq_gg' 
b'Cleartext Transmission of password via Email'

22 Apr 2024

b'Hyperledger' disclosed a bug submitted by b'adnanthekhan' 
b'Docker Secret Disclosure via GitHub Actions Cache Poisoning'

20 Apr 2024

b'Revive Adserver' disclosed a bug submitted by b'karan' 
b'Login page password-guessing attack'

19 Apr 2024

b'SideFX' disclosed a bug submitted by b'itriedallthenamess' 
b'Stored XSS in messages'

17 Apr 2024

b'PortSwigger Web Security' disclosed a bug submitted by b'john_cai11111111' 
b'Incorrect logic when buy one more license which may lead to extend the expire date of existing license'

16 Apr 2024

b'GitHub' disclosed a bug submitted by b'sudi' 
b'Self XSS in Tag name pattern field /<username>/<reponame>/settings/tag_protection/new '

15 Apr 2024

b'inDrive' disclosed a bug submitted by b'maxdha' 
b'#1 XSS on watchdocs.indriverapp.com'

11 Apr 2024

b'inDrive' disclosed a bug submitted by b'maxdha' 
b'#2 XSS on watchdocs.indriverapp.com'

11 Apr 2024

b'inDrive' disclosed a bug submitted by b'maxdha' 
b'#3 XSS on watchdocs.indriverapp.com'

11 Apr 2024

b'8x8' disclosed a bug submitted by b'fo00x' 
b'Unprotected Atlantis Server at https://152.70..'

11 Apr 2024

b'Node.js' disclosed a bug submitted by b'bart' 
b'"Assertion failed" in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash'

08 Apr 2024

b'Snapchat' disclosed a bug submitted by b'hulkvision_' 
b'Intent Leads To Unauthorised Video Call Initiation Leaking Surrounding Informations Of Victim'

05 Apr 2024

b'TikTok' disclosed a bug submitted by b'm7x' 
b'Reflected XSS on Pangle Endpoint '

05 Apr 2024

b'Tools for Humanity' disclosed a bug submitted by b'toormund' 
b'Race Condition Enables Bypassing Verification Check'

04 Apr 2024

b'PortSwigger Web Security' disclosed a bug submitted by b'0xd0m7' 
b'[portswigger.net] Path Traversal al /cms/audioitems'

04 Apr 2024

b'TikTok' disclosed a bug submitted by b'dxcoder' 
b"Using Branded Hashtag Feature User Partnered with Account Manager Can View Videos Uploaded By A Private TikTok Account If 'item_id' Is Known"

03 Apr 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'ooooooo_q' 
b'CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc'

29 Mar 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'hunt1' 
b'Libuv: Improper Domain Lookup that potentially leads to SSRF attacks'

29 Mar 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'frankyueh' 
b'CVE-2024-2466: TLS certificate check bypass with mbedTLS (reward request)'

29 Mar 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'fullmetal5' 
b'CVE-2024-2379: QUIC certificate check bypass with wolfSSL'

29 Mar 2024

1 ... 24 25 26 27 28 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM