Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'light3r' 
b'Bypass report submit restriction/ban using the API key'

29 Oct 2023

b'Mozilla Critical Services' disclosed a bug submitted by b'oja' 
b'Security bug https://bugzilla.mozilla.org/oauth/authorize - CRLF Header injection via "redirect_uri" parameter'

28 Oct 2023

b'Rockstar Games' disclosed a bug submitted by b'sirr0n' 
b'Password and mail address stored unencrypted in memory - Rockstar Game Launcher'

27 Oct 2023

b'Internet Bug Bounty' disclosed a bug submitted by b'happyhacking123' 
b'CVE-2023-40611: Apache Airflow Dag Runs Broken Access Control Vulnerability'

27 Oct 2023

b'Glassdoor' disclosed a bug submitted by b'frankcadillac' 
b'Unauthorized Access to Deleted Interviews on Glassdoor Platform'

27 Oct 2023

b'Urban Dictionary' disclosed a bug submitted by b'flashdisk' 
b'Race condition in up voting and down voting'

27 Oct 2023

b'Mozilla Core Services' disclosed a bug submitted by b'astrounder' 
b'Possibility of Deface through translation tool - www.mozilla.com'

27 Oct 2023

b'Kubernetes' disclosed a bug submitted by b'ginoah' 
b'RCE on ingress-nginx-controller via Ingress spec.rules.http.paths.path field'

26 Oct 2023

b'Mozilla Core Services' disclosed a bug submitted by b'm4y4nk' 
b'Flickr API key leaked in GitHub commit'

26 Oct 2023

b'HackerOne' disclosed a bug submitted by b'bebiks' 
b'Unreleased Hackerone Copilot is vulnerable to IDOR'

25 Oct 2023

b'Kubernetes' disclosed a bug submitted by b'jkroepke' 
b'Code inject via nginx.ingress.kubernetes.io/permanent-redirect annotation'

25 Oct 2023

b'Lark Technologies' disclosed a bug submitted by b'kongwenbin' 
b'Improper Access Control allows OTP bypass'

25 Oct 2023

b'TD Bank' disclosed a bug submitted by b'allenshaji' 
b'Search input is vulnerable for XSS in qa.td.com and dev.td.com'

25 Oct 2023

b'Cloudflare Public Bug Bounty' disclosed a bug submitted by b'suzuka' 
b"Accessing apps protected via ZT's Access when user account is deleted/disabled even after clearing user session/seat"

25 Oct 2023

b'HackerOne' disclosed a bug submitted by b'ahacker1' 
b'New Search Feature: Search for non-public words in limited disclosure reports'

25 Oct 2023

b'EXNESS' disclosed a bug submitted by b'null_hypothesis' 
b'Blind SSRF on https://my.exnessaffiliates.com/ allows for internal network enumeration'

25 Oct 2023

b'HackerOne' disclosed a bug submitted by b'xdemiray' 
b'Hacker email disclosed on submission at hackerone hactivity'

24 Oct 2023

b'U.S. Dept Of Defense' disclosed a bug submitted by b'gu4rdianbyte' 
b'Information Disclosure FrontPage Configuration Information'

20 Oct 2023

b'Mozilla Critical Services' disclosed a bug submitted by b'limusec' 
b'After the upload of an private file, using transformations, the file becomes public without the possibility of changing it.'

20 Oct 2023

b'Mozilla Core Services' disclosed a bug submitted by b'avram' 
b'HTML Injection at https://stage.firefoxmonitor.nonprod.cloudops.mozgcp.net/user/unsubscribe'

20 Oct 2023

1 ... 40 41 42 43 44 ... 717

BY DENIS WERNER - @NOBBD - IMPRESSUM