Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'LinkedIn' disclosed a bug submitted by b'domg' 
b'Stored XSS on LinkedIn App via iframe tag in Article'

28 Feb 2024

b'Daimler Truck' disclosed a bug submitted by b'7absec' 
b'Server-based source code disclosures'

28 Feb 2024

b'Daimler Truck' disclosed a bug submitted by b'7absec' 
b'Time-based SQL Injection'

28 Feb 2024

b'JetBlue' disclosed a bug submitted by b'asce21' 
b'Sensitive information disclosure on grafana'

26 Feb 2024

b'Automattic' disclosed a bug submitted by b'renniepak' 
b'DOM XSS on multiple Automattic domains through postMessages'

26 Feb 2024

b'PortSwigger Web Security' disclosed a bug submitted by b'priyanshusharma9789' 
b'CSP Bypass and escalation of https://hackerone.com/reports/2279346'

23 Feb 2024

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'ryotak' 
b'Arbitrary file read from Cloudflare Pages build environment'

23 Feb 2024

b'X (Formerly Twitter)' disclosed a bug submitted by b'alp' 
b'Ability to getting Twitter Blue verified badge without purchase it'

22 Feb 2024

b'TikTok' disclosed a bug submitted by b'a77w3' 
b'HTML Injection on TikTok Ads'

20 Feb 2024

b'Mars' disclosed a bug submitted by b'xplo1t' 
b'Unrestricted File Upload at '

19 Feb 2024

b'LinkedIn' disclosed a bug submitted by b'mv0x01' 
b'Employee-only Area Bypass'

19 Feb 2024

b'inDrive' disclosed a bug submitted by b'bugsv2' 
b'# Drivers can access the customers phone number, current location without getting their offer accepted!'

19 Feb 2024

b'inDrive' disclosed a bug submitted by b'bugsv2' 
b"Disclosure of users' ip address whenever they view my fright offer on image preview (Without interaction)"

19 Feb 2024

b'PortSwigger Web Security' disclosed a bug submitted by b'joaxcar' 
b'CSP bypass on PortSwigger.net using Google script resources'

18 Feb 2024

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen' 
b'OAuth2 "authorization_code" is valid indefinetly'

17 Feb 2024

b'Nextcloud' disclosed a bug submitted by b'nickvergessen' 
b'Can download files by zipping the folder'

17 Feb 2024

b'TikTok' disclosed a bug submitted by b'ashrafabdelrazik' 
b'Multiple Open Redirect on TikTok domains'

16 Feb 2024

b'LocalTapiola' disclosed a bug submitted by b'shewhoisdeath' 
b'Secure Client-Initiated Renegotiation'

16 Feb 2024

b'Node.js' disclosed a bug submitted by b'tniessen' 
b'Path traversal by monkey-patching Buffer internals'

15 Feb 2024

b'Node.js' disclosed a bug submitted by b'tniessen' 
b'Improper handling of wildcards in --allow-fs-read and --allow-fs-write'

15 Feb 2024

1 ... 28 29 30 31 32 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM