Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Razer US' disclosed a bug submitted by b'edio' 
b'Unauthenticated DOM-based XSS in zvault.razerzone.com via the redir parameter.'

08 Nov 2017

b'Razer US' disclosed a bug submitted by b'edio' 
b'Reflected XSS in deals.razerzone.com via the interesting parameter.'

08 Nov 2017

b'Razer US' disclosed a bug submitted by b'utkarsh1' 
b'[amp.razerzone.com] SQL injection via resource_type parameter '

08 Nov 2017

b'Razer US' disclosed a bug submitted by b'edio' 
b'Unauthenticated DOM-based XSS in pay.zvault.razerzone.com via the redir parameter.'

08 Nov 2017

b'Razer US' disclosed a bug submitted by b'sp1d3rs' 
b'Database credentials leak on the https://razer-id.razerzone.com/'

08 Nov 2017

b'WordPress' disclosed a bug submitted by b'qasuar' 
b'Self-XSS in WordPress Editor Link Modal'

08 Nov 2017

b'Infogram' disclosed a bug submitted by b'spicyturtle' 
b'Internal Ports Scanning via Blind SSRF (URL Redirection to beat filter)'

08 Nov 2017

b'Brave Software' disclosed a bug submitted by b'qab' 
b'application/x-brave-tab should not be readable.'

07 Nov 2017

b'Brave Software' disclosed a bug submitted by b'qab' 
b'OS username disclosure'

07 Nov 2017

b'AlienVault ' disclosed a bug submitted by b'ramsexy' 
b'SSRF protection bypass'

07 Nov 2017

b'AlienVault ' disclosed a bug submitted by b'ramsexy' 
b'[www.threatcrowd.org] - SSRF : AWS private key disclosure'

07 Nov 2017

b'Mail.Ru' disclosed a bug submitted by b'lalka' 
b'CRLF ???????? ?? https://tz.mail.ru'

07 Nov 2017

b'Mail.Ru' disclosed a bug submitted by b'lalka' 
b'SSRF ?? https://target.my.com/'

07 Nov 2017

b'Infogram' disclosed a bug submitted by b'krankopwnz' 
b'Stored XSS in content when Graph is created via API'

07 Nov 2017

b'Informatica' disclosed a bug submitted by b'shogunlab' 
b'[marketplace.informatica.com] User email disclosure'

07 Nov 2017

b'Instacart' disclosed a bug submitted by b'003random' 
b'Bruteforcing password reset tokens, could lead to account takeover'

06 Nov 2017

b'Twitter' disclosed a bug submitted by b'dups' 
b'CSRF in twitterflightschool.com ( CAN POST ON TIMELINE WITHOUT USER PERMISSION)'

06 Nov 2017

b'Infogram' disclosed a bug submitted by b'mrreboot' 
b'Tabnabbing via window.opener'

06 Nov 2017

b'Infogram' disclosed a bug submitted by b'mrreboot' 
b'Weak Password Policy on Signup'

06 Nov 2017

b'Infogram' disclosed a bug submitted by b'mrreboot' 
b'SPF Misconfiguration'

06 Nov 2017

1 ... 499 500 501 502 503 ... 742

BY DENIS WERNER - @NOBBD - IMPRESSUM