Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cablej_dds' 
b'????????? - Insecure download cookie generation allows bypass of CAC authentication, access to deleted and locked files'

11 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cablej_dds' 
b'????? - Pre-generation of VIEWSTATE allows CAC bypass'

11 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cablej_dds' 
b'???? ????? exposes highly sensitive information to public'

11 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'javilarx8' 
b'Unrestricted File Upload'

11 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'rootuser' 
b'Sensitive Information Leaking Through DoD Owned Website. [??????????]'

11 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b's3cr3tsdn' 
b'Remote Code Execution in ??????'

11 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'PII Leak via https://????????'

11 May 2020

b'Visma Public' disclosed a bug submitted by b'semsem123' 
b'Unrestricted file upload leads to Stored XSS'

11 May 2020

b'MTN Group' disclosed a bug submitted by b'tp9222' 
b'Week Passwords generated by password reset function'

09 May 2020

b'Node.js third-party modules' disclosed a bug submitted by b'mik317' 
b'[logkitty] RCE via insecure command formatting'

09 May 2020

b'Vercel' disclosed a bug submitted by b'elmahdi' 
b'through %09 Character the attacker is able to steal Github Token [ Account Takeover ]'

08 May 2020

b'Badoo' disclosed a bug submitted by b'0x3c3e' 
b'Leak of authorization urls leads to account takeover'

08 May 2020

b'Visma Public' disclosed a bug submitted by b'hungry_boy' 
b'Ability to delete projects from Archived companies (Read only version)'

08 May 2020

b'Mail.ru' disclosed a bug submitted by b'adiosmf' 
b'XSS at go.mail.ru'

08 May 2020

b'Mail.ru' disclosed a bug submitted by b'organdonor' 
b'Unrestricted file upload on [ambassador.mail.ru] '

08 May 2020

b'Mail.ru' disclosed a bug submitted by b'01alsanosi' 
b'Stored xss on https://go.mail.ru/'

08 May 2020

b'Mail.ru' disclosed a bug submitted by b'shaktiranjan867' 
b'xss in ub.icq.net'

08 May 2020

b'BTFS' disclosed a bug submitted by b'dagamosst90' 
b'misconfigured CORS let to HPP and SOP bypass'

07 May 2020

b'Imgur' disclosed a bug submitted by b'gennaro' 
b'Sourcemaps and Unminified Source Code Exposed on Pages'

07 May 2020

b'Pornhub' disclosed a bug submitted by b'renekroka' 
b'Self-XSS to Good-XSS - pornhub.com'

07 May 2020

1 ... 301 302 303 304 305 ... 732

BY DENIS WERNER - @NOBBD - IMPRESSUM