Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'rijalrojan' 
b'Replace other user files in Inbox messages '

01 May 2018

b'New Relic' disclosed a bug submitted by b'jon_bottarini' 
b'Bypass of my three other reports #267636 + #255894 + #271861 - (IDOR) Ability to see full name associated with other New Relic accounts'

01 May 2018

b'Rockstar Games' disclosed a bug submitted by b'europa' 
b'Client-side Template Injection in Search, user email/token leak and maybe sandbox escape'

01 May 2018

b'Ruby' disclosed a bug submitted by b'mrtc0' 
b"Invalid URL parsing '#'"

01 May 2018

b'Dropbox' disclosed a bug submitted by b'oaidjoaisdjoaisjdioasfsdhfuios' 
b'User Impersonation - Create Support Ticket With Any Registered Account Email'

01 May 2018

b'GitLab' disclosed a bug submitted by b'wuqidashi' 
b'SSRF vulnerability in gitlab.com webhook'

30 Apr 2018

b'Informatica' disclosed a bug submitted by b'strukt' 
b'XXE at Informatica sub-domain'

30 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`superstatic` is vulnerable to path traversal on Windows'

29 Apr 2018

b'Ruby' disclosed a bug submitted by b'tenderlove' 
b'Response splitting vulnerability in WEBrick'

29 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`foreman` is vulnerable to ReDoS in path'

28 Apr 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`concat-with-sourcemaps` allocates uninitialized Buffers when number is passed as a separator'

28 Apr 2018

b'ICQ' disclosed a bug submitted by b'iframe' 
b'api.icq.com / ??????????? ??????????????? ????? ?????? ???????????? ??? ?????? ???????? ???.'

28 Apr 2018

b'LocalTapiola' disclosed a bug submitted by b'exadmin' 
b'DoS of www.lahitapiolarahoitus.fi via CVE-2018-6389 exploitation'

28 Apr 2018

b'ICQ' disclosed a bug submitted by b'iframe' 
b'api.icq.com / ????????? ?????? ?? ???????? ????????? ?????? ???????? ?????? "&r"'

28 Apr 2018

b'Ed' disclosed a bug submitted by b'cybertiger' 
b'Session Cookie Without Secure Flag '

28 Apr 2018

b'Zomato' disclosed a bug submitted by b'riya' 
b'[www.zomato.com] IDOR - Gold Subscription Details, Able to view "Membership ID" and "Validity Details" of other Users'

28 Apr 2018

b'ICQ' disclosed a bug submitted by b'iframe' 
b'api.icq.com / ??????????? ???????? ???? ?????? (???? icqsystem) '

28 Apr 2018

b'LocalTapiola' disclosed a bug submitted by b'muon4' 
b"Authorization issue on 'valtakirjat' (/e2/verkkopalvelu/)"

28 Apr 2018

b'LocalTapiola' disclosed a bug submitted by b'richardtelleng' 
b'Internal IP Address Disclosure at https://www.lahitapiolarahoitus.fi/wp-json/wp/v2/pages'

28 Apr 2018

b'GitLab' disclosed a bug submitted by b'jobert' 
b'GitLab CI runner can read and poison cache of all other projects'

27 Apr 2018

1 ... 501 502 503 504 505 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM