Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'h1-ctf' disclosed a bug submitted by b'a_l' 
b'CTF Writeup'

14 Jan 2021

b'h1-ctf' disclosed a bug submitted by b'webhak' 
b'h1-ctf : 12 days of hack holiday writeup'

14 Jan 2021

b'Insulet Corporation' disclosed a bug submitted by b'pk_prem' 
b'Subdomain Takeover due to unclaimed domain pointing to Acquia Cloud'

14 Jan 2021

b'Node.js third-party modules' disclosed a bug submitted by b'solov9ev' 
b'[curling] Remote Code Execution'

14 Jan 2021

b'Node.js third-party modules' disclosed a bug submitted by b'solov9ev' 
b'[imagickal] Remote Code Execution'

14 Jan 2021

b'Node.js third-party modules' disclosed a bug submitted by b'solov9ev' 
b'[arpping] Remote Code Execution'

14 Jan 2021

b'Node.js third-party modules' disclosed a bug submitted by b'saddeann' 
b'[dy-server2] - stored Cross-Site Scripting'

14 Jan 2021

b'Stripo Inc' disclosed a bug submitted by b'savxiety' 
b'Bypass of #1047119: Missing Rate Limit while creating Plug-Ins at https://my.stripo.email/cabinet/plugins/'

13 Jan 2021

b'h1-ctf' disclosed a bug submitted by b'rekter0' 
b'ctf walkthrough'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'val_brux' 
b'SQL Injection in www.'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'savxiety' 
b'PII Information Leak at https://.mil/'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Authentication bypass and RCE on the https:// due to exposed Cisco TelePresence SX80 with default credentials'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Directory Indexing on the (https:///) leads to the backups disclosure and credentials leak'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Local File Disclosure on the (https:///) leads to the source code disclosure & DB credentials leak'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pi_hunter50' 
b'System Error Reveals Sensitive SQL Call Data'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'khizer47' 
b'Apache solr RCE via velocity template'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'elpast' 
b'Sensitive data exposure via https:///secure/QueryComponent!Default.jspa - CVE-2020-14179'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'elpast' 
b'Sensitive data exposure via https:///secure/QueryComponent!Default.jspa - CVE-2020-14179'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'r0p0' 
b'SSRF in login page using fetch API exposes victims IP address to attacker controled server'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'POST based RXSS on https:// via frm_email parameter'

12 Jan 2021

1 ... 266 267 268 269 270 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM