Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Rockstar Games' disclosed a bug submitted by b'alexbirsan' 
b'SMB SSRF in emblem editor exposes taketwo domain credentials, may lead to RCE'

12 Jan 2018

b'concrete5' disclosed a bug submitted by b'gamliel' 
b'Host Header Injection allow HiJack Password Reset Link'

12 Jan 2018

b'concrete5' disclosed a bug submitted by b'egix' 
b'Unsafe usage of Host HTTP header in Concrete5 version 5.7.3.1'

11 Jan 2018

b'Data Processing (IBB)' disclosed a bug submitted by b'fms' 
b"cURL / libcURL - CVE-2016-8624 invalid URL parsing with '#'"

11 Jan 2018

b'Quora' disclosed a bug submitted by b'stefanofindsbugs' 
b'XSS when clicking "Share to Twitter" at quora.com/widgets/embed_iframe?path=...'

11 Jan 2018

b'HackerOne' disclosed a bug submitted by b'zuriel' 
b'Invitation token leaks to https://bat.bing.com'

11 Jan 2018

b'SEMrush' disclosed a bug submitted by b'sureshbudharapu' 
b'Cross-origin resource sharing'

11 Jan 2018

b'SEMrush' disclosed a bug submitted by b'karma1' 
b'Following links are vulnerable to clickjacking'

11 Jan 2018

b'Urban Dictionary' disclosed a bug submitted by b'flex0geek' 
b'Stored XSS on urbandictionary.com'

11 Jan 2018

b'OpenSSL (IBB)' disclosed a bug submitted by b'alex_gaynor' 
b'SSL_peek() hang on empty record (CVE-2016-6305)'

11 Jan 2018

b'HackerOne' disclosed a bug submitted by b'bigbug' 
b'Partial disclosure of undisclosed programs through <meta> tags'

11 Jan 2018

b'shopify-scripts' disclosed a bug submitted by b'j0s3' 
b'mruby heredoc notation'

10 Jan 2018

b'Node.js third-party modules' disclosed a bug submitted by b'ysx' 
b'[featurebook] Specification Server Directory Traversal via Crafted Browser Request'

10 Jan 2018

b'Node.js third-party modules' disclosed a bug submitted by b'ysx' 
b'[serve-here] Static Web Server Directory Traversal via Crafted GET Request'

10 Jan 2018

b'RecargaPay' disclosed a bug submitted by b'cablej' 
b'IDOR exposes receipts of all users.'

10 Jan 2018

b'HackerOne' disclosed a bug submitted by b'hk755a' 
b'Missing Password Confirmation at a Critical Function (Payout Method)'

10 Jan 2018

b'Blockstack' disclosed a bug submitted by b'firestone' 
b'Cross site request forgery'

10 Jan 2018

b'Maximum' disclosed a bug submitted by b'firestone' 
b'Weak password '

10 Jan 2018

b'SEMrush' disclosed a bug submitted by b'0ways' 
b'subdomain takeover at news-static.semrush.com'

10 Jan 2018

b'Ubiquiti Networks' disclosed a bug submitted by b'babayaga_' 
b'Stored XSS => community.ubnt.com '

10 Jan 2018

1 ... 516 517 518 519 520 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM