Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'MyCrypto' disclosed a bug submitted by b'w2w' 
b'Content Spoofing or Text Injection support.mycrypto.com'

18 Apr 2018

b'HackerOne' disclosed a bug submitted by b'japz' 
b'Harvesting all private invites using leave program fast-tracked invitation and security@ email forwarding feature'

18 Apr 2018

b'Khan Academy' disclosed a bug submitted by b'hamzar97' 
b'Rate Limitation Vulnerability (DDos)'

17 Apr 2018

b'U.S. Dept Of Defense' disclosed a bug submitted by b'joaomatosf' 
b'Remote Code Execution (RCE) in Multiple DoD Servers and Websites'

17 Apr 2018

b'U.S. Dept Of Defense' disclosed a bug submitted by b'joaomatosf' 
b'Remote Code Execution (RCE) in a DoD website'

17 Apr 2018

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera' 
b'Time based SQL injection on dss.nga.mil'

17 Apr 2018

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera' 
b'SSRF+XSS on simdis.nrl.navy.mil'

17 Apr 2018

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera' 
b'confluence.devforce.disa.mil allowing NIPRNET access and various sensitive cloud information to be leaked'

17 Apr 2018

b'Cloudflare' disclosed a bug submitted by b'filedescriptor' 
b'Potential XSS vulnerability to HTML minification'

17 Apr 2018

b'SEMrush' disclosed a bug submitted by b'nikitastupin' 
b'[oauth token leak] at oauth.semrush.com'

17 Apr 2018

b'ICQ' disclosed a bug submitted by b'catferq' 
b'XSS ? ???? ??? ??????? ? ????????.'

16 Apr 2018

b'ICQ' disclosed a bug submitted by b'catferq' 
b'XSS ? ???????? ????????'

16 Apr 2018

b'Zomato' disclosed a bug submitted by b'foobar7' 
b'Clickjacking: Delete Account, Change privacy settings, Rate business, follow/unfollow (IE)'

15 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'holyvier' 
b'Prototype pollution attack (merge-objects)'

15 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'holyvier' 
b'Prototype pollution attack (merge-options)'

15 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'holyvier' 
b'Prototype pollution attack (merge-recursive)'

15 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'holyvier' 
b'Prototype pollution attack (deep-extend)'

15 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'holyvier' 
b'Prototype pollution attack (deap)'

15 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[glance] Stored XSS via file name allows to run arbitrary JavaScript when directory listing is displayed in browser'

15 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[public] Stored XSS in filenames in directory served by public'

15 Apr 2018

1 ... 501 502 503 504 505 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM