Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'bugra' 
b'Blind XSS in app.pullrequest.com/ via /reviews/ratings/{uuid}'

25 May 2022

b'GitLab' disclosed a bug submitted by b'joaxcar' 
b'Stored XSS in Notes (with CSP bypass for gitlab.com)'

25 May 2022

b'Judge.me ' disclosed a bug submitted by b'caue' 
b'Email templates XSS by filterXSS bypass'

25 May 2022

b'Flickr' disclosed a bug submitted by b'ian' 
b'Critical broken cookie signing on dagobah.flickr.com '

24 May 2022

b'EXNESS' disclosed a bug submitted by b'nearsecurity' 
b'[com.exness.android.pa Android] Universal XSS in webview. Lead to steal user cookies'

24 May 2022

b'Omise' disclosed a bug submitted by b'oblivionlight' 
b'Cross-site scripting on dashboard2.omise.co'

24 May 2022

b'Flickr' disclosed a bug submitted by b'xlord91' 
b'Open redirect bypass'

23 May 2022

b'Flickr' disclosed a bug submitted by b'keer0k' 
b'Stored XSS in photos_user_map.gne'

23 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'farid_hunter' 
b'[python]: Zip Slip Vulnerability'

23 May 2022

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java]: Flow sources and steps for JMS and RabbitMQ'

23 May 2022

b'Evernote' disclosed a bug submitted by b'cyberworlcload' 
b'Email Verification Bypass by bruteforcing when setting up 2FA'

22 May 2022

b'Rocket.Chat' disclosed a bug submitted by b'samuelsiv' 
b'Possible Domain Takeover on AWS Instance.'

22 May 2022

b'lemlist' disclosed a bug submitted by b'ondermedia' 
b'Clickjacking at app.lemlist.com'

20 May 2022

b'GitLab' disclosed a bug submitted by b'joaxcar' 
b'Arbitrary POST request as victim user from HTML injection in Jupyter notebooks'

20 May 2022

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'Error in Deleting Deck cards attachment reveals the full path of the website'

20 May 2022

b'Nextcloud' disclosed a bug submitted by b'supr4s' 
b"Nextcloud Deck : Possibility for anyone to add a stack with existing tasks on anyone's board"

20 May 2022

b'Nextcloud' disclosed a bug submitted by b'geekysherlock' 
b'Sensitive files/ data exists post deletion of user account'

20 May 2022

b'8x8' disclosed a bug submitted by b'huntinex' 
b'8x8pilot.com: Reflected XSS in Apache Tomcat /jsp-examples example directory'

19 May 2022

b'GitLab' disclosed a bug submitted by b'kannthu' 
b'Stored XSS in repository file viewer'

19 May 2022

b'Slack' disclosed a bug submitted by b'smitgharat0001' 
b'Email html Injection'

19 May 2022

1 ... 149 150 151 152 153 ... 759

BY DENIS WERNER - @NOBBD - IMPRESSUM