Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mygf' 
b'Stored Xss Vulnerability on ????????'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'usamasood' 
b'[??????????] \xe2\x80\x94 Directory traversal via `/aerosol-bin/???????/display_directory_????_t.cgi`'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'usamasood' 
b'[????????] \xe2\x80\x94 XSS on `/???????_flight/images` via `advanced_val` parameter'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'yghonem' 
b'Domian Takeover in [???????]'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'rootuser' 
b'Sensitive Information Leaking Through Navy Website. [?????]'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'rootuser' 
b'Sensitive Information Leaking Through DARPA Website. [?????????]'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'yghonem' 
b'No ACL on S3 Bucket in [https://www.??????????/]'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mohammedadam24' 
b'Application level DoS via xmlrpc.php '

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'yghonem' 
b'Username&password is Disclosure in readme file in [https://?????????]'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'daehee' 
b'Admin Login Credential Leak for DoD Gitlab EE instance'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'miguel_santareno' 
b'Unencrypted __VIEWSTATE parameter in a DoD website'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'miguel_santareno' 
b'Padding Oracle ms10-070 in the a DoD website (https://??????/)'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'brodie_codie' 
b'Improper Neutralization of Input During Web Page Generation'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mohammedadam24' 
b'Null byte Injection in https://????/'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'0xpegg' 
b'Bypassing CORS Misconfiguration Leads to Sensitive Exposure'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'waymobetta' 
b'CORS Misconfiguration Leads to Exposing User Data'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'risinghunter' 
b'idor on upload profile functionality '

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'gnarlygoat' 
b'Publicly accessible Grafana install allows pivoting to Prometheus datasource'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arman95' 
b'Reflected cross-site scripting vulnerability on a DoD website'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arkaic' 
b'Followup - SQL Injection - https://??????????/??????/MSI.portal'

14 May 2020

1 ... 337 338 339 340 341 ... 771

BY DENIS WERNER - @NOBBD - IMPRESSUM