Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zomato' disclosed a bug submitted by b'gerben_javado' 
b'Blind XSS - Report review - Admin panel'

29 Mar 2018

b'Zomato' disclosed a bug submitted by b'gerben_javado' 
b'[www.zomato.com] Privilege Escalation - /php/restaurant_menus_handler.php'

29 Mar 2018

b'Zomato' disclosed a bug submitted by b'gerben_javado' 
b'[www.zomato.com] Privilege Escalation - Control reviews - /????dashboard_handler.php'

29 Mar 2018

b'Zomato' disclosed a bug submitted by b'gerben_javado' 
b'[www.zomato.com] Boolean SQLi - /???????.php'

29 Mar 2018

b'Zomato' disclosed a bug submitted by b'gerben_javado' 
b'[www.zomato.com] Boolean SQLi - /?????.php'

29 Mar 2018

b'Upserve ' disclosed a bug submitted by b's3curityb3ast' 
b'reports.breadcrumb.com is vulnerable for Arbitrary file existence disclosur CVE-2014-7829 '

29 Mar 2018

b'Brave Software' disclosed a bug submitted by b'skansing' 
b'Download attribute allows downloading local files'

29 Mar 2018

b'HackerOne' disclosed a bug submitted by b'yaworsk' 
b'Extra program metrics disclosed via /PROGRAM_NAME json response'

28 Mar 2018

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'`whereis` concatenates unsanitized input into exec() command'

28 Mar 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[metascrapper] Stored XSS in Open Graph meta properties read by metascrapper'

28 Mar 2018

b'Pornhub' disclosed a bug submitted by b'sp1d3rs' 
b'Stored XSS (client-side, using cookie poisoning) on the pornhubpremium.com'

27 Mar 2018

b'HackerOne' disclosed a bug submitted by b'0x0g' 
b'h1-202 leaderboard photo discloses local wifi password '

25 Mar 2018

b'WePay' disclosed a bug submitted by b'sp1d3rs' 
b'Reflected XSS in the IE 11 / Edge (latest versions) on the stage-go.wepay.com'

24 Mar 2018

b'Ruby on Rails' disclosed a bug submitted by b'kaarloh' 
b"XSS vulnerability in sanitize-method when parsing link's href"

22 Mar 2018

b'RubyGems' disclosed a bug submitted by b'nmalkin' 
b'Installer can modify other gems if gem name is specially crafted'

22 Mar 2018

b'Twitter' disclosed a bug submitted by b'vijay_kumar1110' 
b'Urgent : Unauthorised Access to Media content of all Direct messages and protected tweets(Indirect object reference)'

21 Mar 2018

b'Coinbase' disclosed a bug submitted by b'vicompany' 
b'Ethereum account balance manipulation'

21 Mar 2018

b'SEMrush' disclosed a bug submitted by b'asad90' 
b' CORS (Cross-Origin Resource Sharing)'

20 Mar 2018

b'MyCrypto' disclosed a bug submitted by b'bigshaq' 
b'DOM Based XSS in mycrypto.com'

18 Mar 2018

b'Monero' disclosed a bug submitted by b'c4c1234757b4f1e468a29d480d78f2' 
b'Monero GUI not linked with /DYNAMICBASE or hardening on windows, no ASLR'

18 Mar 2018

1 ... 509 510 511 512 513 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM