Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'fr4via' 
b"The POS app doesn't revoke the Xauth token "

08 Apr 2021

b'Shopify' disclosed a bug submitted by b'saltymermaid' 
b'Staff with no permissions could possibly list and accept billing promotions'

08 Apr 2021

b'OpenSSL (IBB)' disclosed a bug submitted by b'reaperhulk' 
b'Integer overflow in CipherUpdate'

08 Apr 2021

b'Ruby' disclosed a bug submitted by b'bugdiscloseguys' 
b'Path traversal in Tempfile on windows OS due to unsanitized backslashes'

07 Apr 2021

b'Tube8' disclosed a bug submitted by b'bubbounty' 
b'CRITICAL ISSUE : Leak of all accounts mail login md5 pass and more'

06 Apr 2021

b'Mail.ru' disclosed a bug submitted by b'kwel' 
b'XSS " " [city-mobil.ru/taxiserv]'

06 Apr 2021

b'Mail.ru' disclosed a bug submitted by b'homosec' 
b'DOM based XSS via postMessage at store.my.games'

06 Apr 2021

b'Mail.ru' disclosed a bug submitted by b'p4fg' 
b'DOM XSS on https://biz.mail.ru/domains/goto/mail/ via parameter pollution'

06 Apr 2021

b'Mail.ru' disclosed a bug submitted by b'gevakun' 
b'Exposed Credentials May Leads to Tarantool Infrastructure Leak'

06 Apr 2021

b'Mail.ru' disclosed a bug submitted by b'gevakun' 
b'"blog.skillfactory.ru" Vulnerable to Directory Traversal '

06 Apr 2021

b'Mail.ru' disclosed a bug submitted by b'gevakun' 
b'This Github Repository Seems Leaking Incoming Samokat Project'

06 Apr 2021

b'Mail.ru' disclosed a bug submitted by b'0x01alka' 
b' 1C '

06 Apr 2021

b'Mail.ru' disclosed a bug submitted by b'impalanichamy' 
b"Information Disclosure of Garbage Collection Cycle 'Again'"

06 Apr 2021

b'HackerOne' disclosed a bug submitted by b'ex1st4nc3_' 
b'Ability to invite a new member on Sandbox Program'

05 Apr 2021

b'Liberapay' disclosed a bug submitted by b'samjoy_26' 
b'Login CSRF : Login Authentication Flaw on https://liberapay.com/'

05 Apr 2021

b'TikTok' disclosed a bug submitted by b'bubbounty' 
b'Cross-Tenant IDOR ( graphql `AddRulesToPixelEvents` query ) allowing to add, update, and delete rules of any Pixel events on the platform'

02 Apr 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'fuomag9' 
b'Website vulnerable to POODLE (SSLv3) with expired certificate'

02 Apr 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'hemantsolo' 
b'Password Reset link hijacking via Host Header Poisoning leads to account takeover'

02 Apr 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'chron0x_' 
b'Reflected XSS on '

02 Apr 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'chron0x_' 
b'Reflected XSS on '

02 Apr 2021

1 ... 163 164 165 166 167 ... 694

BY DENIS WERNER - @NOBBD - IMPRESSUM