Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Pushwoosh' disclosed a bug submitted by b'ryudox' 
b'Cleartext Password returned in JSON response'

04 Mar 2018

b'ownCloud' disclosed a bug submitted by b'wdem' 
b'Password Complexity Not Enforced On Password Change'

03 Mar 2018

b'Automattic' disclosed a bug submitted by b'slavco' 
b'wpjobmanager - unserialize of user input'

03 Mar 2018

b'TTS Bug Bounty' disclosed a bug submitted by b'northivanastan' 
b'SSH server compatible with several vulnerable cryptographic algorithms'

02 Mar 2018

b'Keybase' disclosed a bug submitted by b'tomnomnom' 
b'Difference in query string parameter processing between Hacker News and Keybase Chrome extension spawns chat to incorrect user'

02 Mar 2018

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'ysx' 
b'[growth.grab.com] Reflected XSS via Base64-encoded "q" param on "my.html" Valentine\'s microsite'

02 Mar 2018

b'LocalTapiola' disclosed a bug submitted by b'muon4' 
b'Information exposure via error pages (www.lahitapiola.fi Tomcat)'

02 Mar 2018

b'LocalTapiola' disclosed a bug submitted by b'putsi' 
b'Reflected XSS+CSRF on secure.lahitapiola.fi'

02 Mar 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[simple-server] HTML with iframe element can be used as filename, which might lead to load and execute malicious JavaScript '

01 Mar 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[angular-http-server] Path Traversal in angular-http-server.js allows to read arbitrary file from the remote server'

01 Mar 2018

b'Node.js third-party modules' disclosed a bug submitted by b'alyssa_herrera' 
b'[uppy] Stored XSS due to crafted SVG file'

01 Mar 2018

b'RubyGems' disclosed a bug submitted by b'plover' 
b'Negative size in tar header causes infinite loop'

01 Mar 2018

b'Zomato' disclosed a bug submitted by b'nbsp' 
b'SSRF in https://www.zomato.com???? allows reading local files and website source code'

28 Feb 2018

b'Nextcloud' disclosed a bug submitted by b'qasim' 
b'Email Notification should be get while changing password on apps.nextcloud.com'

28 Feb 2018

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'grouptherapy' 
b'Registration enabled on ???grab.com'

28 Feb 2018

b'Shopify' disclosed a bug submitted by b'0xacb' 
b'Email Reply'

27 Feb 2018

b'LocalTapiola' disclosed a bug submitted by b'yonm13' 
b'Test Page available with Server details on /r/test (viestinta.lahitapiola.fi)'

27 Feb 2018

b'LocalTapiola' disclosed a bug submitted by b'yonm13' 
b'RCE using bash command injection on /system/images (toimitilat.lahitapiola.fi)'

27 Feb 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[hekto] Path Traversal vulnerability allows to read content of arbitrary files'

26 Feb 2018

b'Node.js third-party modules' disclosed a bug submitted by b'bl4de' 
b'[simplehttpserver] Stored XSS in file names leads to malicious JavaScript code execution when directory listing is output in HTML'

26 Feb 2018

1 ... 512 513 514 515 516 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM