REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Node.js third-party modules'
disclosed a bug submitted by
b'bl4de'
b'[stattic] Inproper path validation leads to Path Traversal and allows to read arbitrary files with any extension(s)'
06 Mar 2018
b'Khan Academy'
disclosed a bug submitted by
b'securitygab'
b'[critical] sql injection by GET method'
06 Mar 2018
b'Binary.com'
disclosed a bug submitted by
b'flex0geek'
b'Leaking Referrer in Reset Password Link'
06 Mar 2018
b'Shopify'
disclosed a bug submitted by
b'vijay_kumar1110'
b'Access to Private Photos of Apps in App section(IDOR)'
05 Mar 2018
b'VK.com'
disclosed a bug submitted by
b'barracuda_'
b'Blind XXE on pu.vk.com'
04 Mar 2018
b'VK.com'
disclosed a bug submitted by
b'pisarenko'
b'??????? ? ?????? ?? ????????'
04 Mar 2018
b'VK.com'
disclosed a bug submitted by
b'pisarenko'
b'?????????? flood ???????? ? ???????? ??'
04 Mar 2018
b'VK.com'
disclosed a bug submitted by
b'yango'
b'????????? (?????????? upgreid) ?????????: ?????? ?????????? ?? ???? ? ???????? (XSS - ?? ?????????)'
04 Mar 2018
b'VK.com'
disclosed a bug submitted by
b'lincoln9932'
b'CSRF ??????????????? ???????? ? ????? ? ??????'
04 Mar 2018
b'Node.js third-party modules'
disclosed a bug submitted by
b'bl4de'
b'[glance] Path Traversal in glance static file server allows to read content of arbitrary file'
04 Mar 2018
b'Pushwoosh'
disclosed a bug submitted by
b'ryudox'
b'Cleartext Password returned in JSON response'
04 Mar 2018
b'ownCloud'
disclosed a bug submitted by
b'wdem'
b'Password Complexity Not Enforced On Password Change'
03 Mar 2018
b'Automattic'
disclosed a bug submitted by
b'slavco'
b'wpjobmanager - unserialize of user input'
03 Mar 2018
b'TTS Bug Bounty'
disclosed a bug submitted by
b'northivanastan'
b'SSH server compatible with several vulnerable cryptographic algorithms'
02 Mar 2018
b'Keybase'
disclosed a bug submitted by
b'tomnomnom'
b'Difference in query string parameter processing between Hacker News and Keybase Chrome extension spawns chat to incorrect user'
02 Mar 2018
b'Grabtaxi Holdings Pte Ltd'
disclosed a bug submitted by
b'ysx'
b'[growth.grab.com] Reflected XSS via Base64-encoded "q" param on "my.html" Valentine\'s microsite'
02 Mar 2018
b'LocalTapiola'
disclosed a bug submitted by
b'muon4'
b'Information exposure via error pages (www.lahitapiola.fi Tomcat)'
02 Mar 2018
b'LocalTapiola'
disclosed a bug submitted by
b'putsi'
b'Reflected XSS+CSRF on secure.lahitapiola.fi'
02 Mar 2018
b'Node.js third-party modules'
disclosed a bug submitted by
b'bl4de'
b'[simple-server] HTML with iframe element can be used as filename, which might lead to load and execute malicious JavaScript '
01 Mar 2018
b'Node.js third-party modules'
disclosed a bug submitted by
b'bl4de'
b'[angular-http-server] Path Traversal in angular-http-server.js allows to read arbitrary file from the remote server'
01 Mar 2018
1
...
502
503
504
505
506
...
766
BY DENIS WERNER - @NOBBD -
IMPRESSUM