Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'4lemon' 
b'Customer domain information disclosure at https://biz.mail.ru/api/domains/*'

12 Mar 2021

b'Uber' disclosed a bug submitted by b'healdb' 
b'Open AWS S3 bucket at ubergreece.s3.amazonaws.com exposes confidential internal documents and files'

12 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'logicmap' 
b'[codeql-go]: Add query to find use of constant state parameter in Oauth2 flow'

12 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'p0wn4j' 
b'Java: Fix NashornScriptEngine detection in ScriptEngine query'

12 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-312: Query to detect cleartext storage of sensitive information using Android SharedPreferences'

12 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-598: Use of GET Request Method with Sensitive Query Strings'

12 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'ihsinme: CPP add query for CWE-788 Access of memory location after the end of a buffer using strlen.'

12 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-327: Add more broken crypto algorithms'

12 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'elpast' 
b'critical information disclosure'

11 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'elpast' 
b'critical information disclosure'

11 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'geeknik' 
b'reflected xss @ www.'

11 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'x3ph_' 
b'param allows any external resource to be downloadable | https://'

11 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'Blind Stored XSS on https:// after filling a request at https://'

11 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'Stored XSS through name / last name on https:///'

11 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ibring' 
b'Reflected XSS on https://'

11 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xelkomy' 
b'RXSS - https:///'

11 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mit0z' 
b'CRXDE Lite/CRX is on exposed that leads to PII disclosure'

11 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sleepnotf0und' 
b'IDOR leads to Leakage an Login Information'

11 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'hemantsolo' 
b'Blind Stored XSS on leads to takeover admin account'

11 Mar 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'atbabers' 
b'Information Disclosure(PHPINFO/Credentials) on DoD Asset'

11 Mar 2021

1 ... 250 251 252 253 254 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM