Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'youstin' 
b"[ Spot Check ] Team members can edit a user's write-up"

06 Jun 2024

b'EXNESS' disclosed a bug submitted by b'alexandrio' 
b'GraphQL attribute Batching DOS can take down pwapi.ex2b.com'

04 Jun 2024

b'WakaTime' disclosed a bug submitted by b'hasn0x' 
b'IDOR to view order information of users and personal information'

02 Jun 2024

b'Basecamp' disclosed a bug submitted by b'fr4via' 
b'Account takeover via insecure intent handling '

30 May 2024

b'HackerOne' disclosed a bug submitted by b'zy9ard3' 
b"[hackerone.com] Program's old handles are not blacklisted like usernames and allows reclaim over past handles for potential abuse"

30 May 2024

b'Nextcloud' disclosed a bug submitted by b'lukasreschke' 
b'user_oidc allows registering new accounts by going through ID4Me flow'

30 May 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'iylz' 
b'Proxy-Authorization header not cleared on cross-origin redirect in undici.request'

29 May 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'tniessen' 
b'Path traversal by monkey-patching Buffer internals'

29 May 2024

b'Internet Bug Bounty' disclosed a bug submitted by b'tniessen' 
b'Improper handling of wildcards in --allow-fs-read and --allow-fs-write'

29 May 2024

b'ExpressionEngine' disclosed a bug submitted by b'd3addog' 
b'Non-authenticated path traversal leading to arbitrary file read '

28 May 2024

b'ExpressionEngine' disclosed a bug submitted by b'd0bby' 
b'Import/Convert user file exposure leading to logins/passwords/PII leak. '

28 May 2024

b'ExpressionEngine' disclosed a bug submitted by b'd0bby' 
b'Arbitrary comment content change with GET CSRF. '

28 May 2024

b'ExpressionEngine' disclosed a bug submitted by b'd0bby' 
b'Arbitrary forum topic close with GET CSRF.'

28 May 2024

b'ExpressionEngine' disclosed a bug submitted by b'd0bby' 
b'Comment/channel unsubscribe GET CSRF'

28 May 2024

b'ExpressionEngine' disclosed a bug submitted by b'd0bby' 
b'Stored XSS filter bypass on discussion forum. "URL" tag. '

28 May 2024

b'ExpressionEngine' disclosed a bug submitted by b'd0bby' 
b'Stored XSS filter bypass on discussion forum. '

28 May 2024

b'ExpressionEngine' disclosed a bug submitted by b'sum-catnip' 
b'Authenticated RCE via page title'

28 May 2024

b'ExpressionEngine' disclosed a bug submitted by b'egix' 
b'PHP Code Injection through "Translate::save()" method'

28 May 2024

b'ExpressionEngine' disclosed a bug submitted by b'mariuszpoplawski' 
b'Low privileges (auth) Remote Command Execution - PHP file upload bypass.'

28 May 2024

b'HackerOne' disclosed a bug submitted by b'hacktus' 
b'LLM03: Training Data Poisoning via ASCII decoding '

28 May 2024

1 ... 32 33 34 35 36 ... 729

BY DENIS WERNER - @NOBBD - IMPRESSUM