Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'juno_hacker' 
b'Github wikis are editable by anyone https://github.com/nextcloud/bookmarks/wiki'

15 Jan 2021

b'Nextcloud' disclosed a bug submitted by b'ar-arvind' 
b'Bypassing Passcode/Device credentials'

15 Jan 2021

b'ImpressCMS' disclosed a bug submitted by b'solov9ev' 
b'SQL injection when configuring a database '

14 Jan 2021

b'Mail.ru' disclosed a bug submitted by b'yukusawa18' 
b'BLIND SSRF ON http://jsgames.mail.ru via avaOp parameter '

14 Jan 2021

b'Mail.ru' disclosed a bug submitted by b'sh1yo' 
b'reflected xss on learn.city-mobil.ru via redirect_url parameter'

14 Jan 2021

b'Mail.ru' disclosed a bug submitted by b'steal_wart' 
b'Information Disclosure '

14 Jan 2021

b'Mail.ru' disclosed a bug submitted by b'steal_wart' 
b'Information Disclosure on www7.promo.plazius.ru'

14 Jan 2021

b'Mail.ru' disclosed a bug submitted by b'steal_wart' 
b'Information Disclosure on qa-delivery-srv.plazius.ru'

14 Jan 2021

b'Mail.ru' disclosed a bug submitted by b'kaimi' 
b'[aw.mail.ru] XSS on /quiztank page'

14 Jan 2021

b'h1-ctf' disclosed a bug submitted by b'kunal94' 
b'Hackyholidays [ h1-ctf] writeup [mission:- stop the grinch ]'

14 Jan 2021

b'h1-ctf' disclosed a bug submitted by b'a_l' 
b'CTF Writeup'

14 Jan 2021

b'h1-ctf' disclosed a bug submitted by b'webhak' 
b'h1-ctf : 12 days of hack holiday writeup'

14 Jan 2021

b'Insulet Corporation' disclosed a bug submitted by b'pk_prem' 
b'Subdomain Takeover due to unclaimed domain pointing to Acquia Cloud'

14 Jan 2021

b'Node.js third-party modules' disclosed a bug submitted by b'solov9ev' 
b'[curling] Remote Code Execution'

14 Jan 2021

b'Node.js third-party modules' disclosed a bug submitted by b'solov9ev' 
b'[imagickal] Remote Code Execution'

14 Jan 2021

b'Node.js third-party modules' disclosed a bug submitted by b'solov9ev' 
b'[arpping] Remote Code Execution'

14 Jan 2021

b'Node.js third-party modules' disclosed a bug submitted by b'saddeann' 
b'[dy-server2] - stored Cross-Site Scripting'

14 Jan 2021

b'Stripo Inc' disclosed a bug submitted by b'savxiety' 
b'Bypass of #1047119: Missing Rate Limit while creating Plug-Ins at https://my.stripo.email/cabinet/plugins/'

13 Jan 2021

b'h1-ctf' disclosed a bug submitted by b'rekter0' 
b'ctf walkthrough'

12 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'val_brux' 
b'SQL Injection in www.'

12 Jan 2021

1 ... 267 268 269 270 271 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM