Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Omise' disclosed a bug submitted by b'ndizon_' 
b'Open redirect Via X-Forwarded-Host'

17 Nov 2024

b'Nextcloud' disclosed a bug submitted by b'tuyenee' 
b'Nextcloud Tables app - inserting rows to an arbitrary table possible'

17 Nov 2024

b'MTN Group' disclosed a bug submitted by b'offensiveops' 
b'CVE-2017-9822 DotNetNuke Cookie Deserialization Remote Code Execution (RCE) on lonidoor.mtn.ci'

16 Nov 2024

b'Nextcloud' disclosed a bug submitted by b'maccs' 
b'User can copy locked folders and gain access to the contents'

16 Nov 2024

b'Nextcloud' disclosed a bug submitted by b'kesselb' 
b'Open redirect when logging in with user_oidc'

15 Nov 2024

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'Attachments folder for Text app is accessible on Files Drop/Password protected shares'

15 Nov 2024

b'Nextcloud' disclosed a bug submitted by b'shushangw' 
b'Mail auto configurator can be tricked into sending account information to wrong servers '

15 Nov 2024

b'MTN Group' disclosed a bug submitted by b'offensiveops' 
b'Unauthenticated phpinfo()files could lead to ability file read at h3f6.n1.ips.mtn.co.ug '

15 Nov 2024

b'HackerOne' disclosed a bug submitted by b'raditz' 
b'Takeover of hackerone.engineering via Medium '

14 Nov 2024

b'LinkedIn' disclosed a bug submitted by b'sevada797' 
b'Can see phone numbers of others by providing mail address'

13 Nov 2024

b'Doppler' disclosed a bug submitted by b'mr_root_0101' 
b'Availability Impact from Exploiting Project Name Vulnerabilities'

13 Nov 2024

b'Acronis' disclosed a bug submitted by b'theelgo64' 
b'IDOR in backup recovery functionality'

13 Nov 2024

b'Mozilla' disclosed a bug submitted by b'vanhoefm' 
b'Leakage of traffic in plaintext towards the IP address of VPN server'

08 Nov 2024

b'Mozilla' disclosed a bug submitted by b'vanhoefm' 
b'Leaking VPN traffic through non-RFC1918 local IP addresses'

08 Nov 2024

b'curl' disclosed a bug submitted by b'rootgh0st' 
b'Buffer overflow in strcpy'

07 Nov 2024

b'AWS VDP' disclosed a bug submitted by b'zolaer9527' 
b'A potential risk in the experimental-programmatic-access-ccft which can be used to privilege escalation.'

06 Nov 2024

b'curl' disclosed a bug submitted by b'newfunction' 
b'CVE-2024-9681: HSTS subdomain overwrites parent cache entry'

06 Nov 2024

b'Acronis' disclosed a bug submitted by b'kindone' 
b' Potential XSS Vulnerability in Acronis Login Callback URL'

06 Nov 2024

b'Acronis' disclosed a bug submitted by b'kindone' 
b'Potential XSS in redirect_url Parameter'

06 Nov 2024

b'curl' disclosed a bug submitted by b'reterix' 
b'Exploitable Format String Vulnerability in curl_mfprintf Function'

06 Nov 2024

1 2 3 4 5 6 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM