Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'moonwalker' 
b' '

09 Dec 2020

b'Slack' disclosed a bug submitted by b'demonia' 
b'Slack-Corp Heroku application disclosing limited info about company members'

09 Dec 2020

b'Automattic' disclosed a bug submitted by b'lu3ky-13' 
b'Sql injection on docs.atavist.com'

08 Dec 2020

b'Badoo' disclosed a bug submitted by b'th4nu_0x0' 
b'Race Condition on "Get free Badoo Premium" which allows to get more days of free premium for Free. '

07 Dec 2020

b'ImpressCMS' disclosed a bug submitted by b'kurdishhacked' 
b'Download full backup and Cross site scripting '

06 Dec 2020

b'OPPO' disclosed a bug submitted by b'fuomag9' 
b'Arbitrary thread deletion on c.realme.com'

06 Dec 2020

b'Automattic' disclosed a bug submitted by b'ajay_saycure' 
b'Able to comment/view in others support ticket at https://en.instagram-brand.com/requests/dashboard'

05 Dec 2020

b'curl' disclosed a bug submitted by b'1wc' 
b'An integer overflow found in /lib/urlapi.c'

05 Dec 2020

b'curl' disclosed a bug submitted by b'snsn' 
b'curl overwrite local file with -J'

05 Dec 2020

b'curl' disclosed a bug submitted by b'mszpl' 
b'Partial password leak over DNS on HTTP redirect'

05 Dec 2020

b'OpenVPN' disclosed a bug submitted by b'jub0bs' 
b'Some build dependencies are downloaded over an insecure channel (without subsequent integrity checks)'

04 Dec 2020

b'PlayStation' disclosed a bug submitted by b'parsiya' 
b"Websites Can Run Arbitrary Code on Machines Running the 'PlayStation Now' Application"

04 Dec 2020

b'Stripo Inc' disclosed a bug submitted by b'binit' 
b'Non-revoked API Key Disclosure in a Disclosed API Key Disclosure Report on Stripo'

04 Dec 2020

b'Basecamp' disclosed a bug submitted by b'babykeem' 
b'SSL expired subdomain leads to API swap with main and flagged cookies. Unable to log device ids and certain session tokens. '

03 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'jayesh25' 
b'Improper Restriction of Excessive Authentication Attempts at https://ucs.ru/login'

03 Dec 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'al-madjus' 
b'Leaked DB credentials on https://.mil/'

03 Dec 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'CSRF to Stored HTML injection at https://www.'

03 Dec 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'PII Leak of USCG Designated Examiner List at https://www.'

03 Dec 2020

b'Kubernetes' disclosed a bug submitted by b'kittytrace' 
b'Development Application Credentials + Information Exposed'

03 Dec 2020

b'Basecamp' disclosed a bug submitted by b'foobar7' 
b'Bypass of image rewriting / tracking blocker via srcset'

03 Dec 2020

1 ... 273 274 275 276 277 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM