Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Logitech' disclosed a bug submitted by b'bugra' 
b'IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id field'

26 Nov 2020

b'Palo Alto Software' disclosed a bug submitted by b'ph-hitachi' 
b'IDOR on notes to HTML injection'

26 Nov 2020

b'Bumble' disclosed a bug submitted by b'godzkid' 
b'On Singing up with a Phone number , The 4 digit OTP does not expires for a long time leading to an easy attack and make a verified account easilty'

25 Nov 2020

b'Zendesk' disclosed a bug submitted by b'imran_nazir' 
b' CSRF on developer.zendesk.com via Cache Deception'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'naategh' 
b'lenta_proxy information disclosure'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'paul_axe' 
b'Source code and internal credentials disclosure'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'elmahdi' 
b'Blind SSRF on http://info.ucs.ru/settings/check/'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'elmahdi' 
b'Redmin API Key Exposed In GIthub '

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'sicksec' 
b'Access User Tickets via IDOR in [widget.support.my.games]'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'sodium_' 
b'the same as #948259 - XSS at jsgames.mail.ru'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'steal_wart' 
b'Information Disclosure '

25 Nov 2020

b'BugPoC' disclosed a bug submitted by b'virenpawar' 
b'Solution to the XSS Challenge '

24 Nov 2020

b'Helium' disclosed a bug submitted by b'eissen5c' 
b'Hyperlink Injection on Email Invitation'

24 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'balisong' 
b' SharePoint Web Services Exposed to Anonymous Access'

24 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'balisong' 
b' SharePoint Web Services Exposed to Anonymous Access'

24 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'moloshy' 
b'Local File Inclusion In Registration Page'

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'silentbreach' 
b'View another user information with IDOR vulnerability '

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'Reflected XSS on https:/// (Bypass of #1002977)'

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'z3ck3bug' 
b'{} It is posible download all information and files via S3 Bucket Misconfiguration'

23 Nov 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'zinminphy0' 
b'[SQLI ]Time Bassed Injection at via //library.php?c=G14 parameter'

23 Nov 2020

1 ... 258 259 260 261 262 ... 752

BY DENIS WERNER - @NOBBD - IMPRESSUM