Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'Local File Disclosure on the (https://.edu/) leads to the full source code disclosure and credentials leak'

27 Jun 2024

b'U.S. Dept Of Defense' disclosed a bug submitted by b'berserker1999' 
b'IDOR leading unauthenticated attacker to download documents discloses PII of users and soldiers via https://www./Download.aspx?id= [HtUS]'

27 Jun 2024

b'Mars' disclosed a bug submitted by b'b_i_n_i_a_m' 
b'sqli on search functionality'

25 Jun 2024

b'Mars' disclosed a bug submitted by b'mkhmd17' 
b'Attacker can add two free bags offered by the site at the same time.'

25 Jun 2024

b'Mars' disclosed a bug submitted by b'b_i_n_i_a_m' 
b'Sqli on search functionality'

25 Jun 2024

b'Mars' disclosed a bug submitted by b'blax17' 
b'Reflected xss on '

25 Jun 2024

b'Mars' disclosed a bug submitted by b'dr34m14' 
b'CSRF resulting in adding pet at '

25 Jun 2024

b'Mars' disclosed a bug submitted by b'haoshokunoo' 
b'Account takeover using reset password link'

25 Jun 2024

b'Booking.com' disclosed a bug submitted by b'jub0bs' 
b'Subdomain takeover of ci-support.booking.com (pointing to Zendesk)'

25 Jun 2024

b'Kubernetes' disclosed a bug submitted by b'jub0bs' 
b'monitoring.prow-canary.k8s.io is vulnerable to CVE-2022-21703 (Grafana 0-day)'

25 Jun 2024

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q' 
b'DoS with crafted "Range" header'

25 Jun 2024

b'IBM' disclosed a bug submitted by b'samurai_jack0' 
b'S3 Bucket Takeover on apptio endpoint'

21 Jun 2024

b'HackerOne' disclosed a bug submitted by b'ketr0it' 
b'Ability to identify actual private from sandboxed programs using link hackerone.com/$handle/terms_acceptance_data.csv'

20 Jun 2024

b'Nextcloud' disclosed a bug submitted by b'maholli' 
b'Notes app can be tricked into using a received share created before the user logged in'

19 Jun 2024

b'Tools for Humanity' disclosed a bug submitted by b'lauritz' 
b'[Meetup][World ID][OIDC] Insufficient Filtering of "state" Parameter in Response Mode form_post leads to XSS and ATO'

19 Jun 2024

b'HackerOne' disclosed a bug submitted by b'v0id1' 
b'Program Member Could Duplicate Report To A Non Related Program Original Report '

19 Jun 2024

b'curl' disclosed a bug submitted by b'z2_' 
b'NULL dereference when encoding DN of x509 certificate'

19 Jun 2024

b'HackerOne' disclosed a bug submitted by b'iam_srpk' 
b'"package_name" can be set as desired when submitting a Pentest Opportunity form'

19 Jun 2024

b'HackerOne' disclosed a bug submitted by b'japz' 
b'[IDOR] Improper Access Control on Embedded Submission Form'

19 Jun 2024

b'Enjin' disclosed a bug submitted by b'19whoami19' 
b'Cloudflare /cdn-cgi/ path allows resizing images from unauthorised sources on enjinusercontent.com'

19 Jun 2024

1 ... 43 44 45 46 47 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM