Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'hitman_47' 
b'XSS through image upload of contacts using svg file with png extension '

26 Dec 2020

b'Automattic' disclosed a bug submitted by b'ahmd_halabi' 
b'XSS in Email Input [intensedebate.com]'

26 Dec 2020

b'CS Money' disclosed a bug submitted by b'gatolouco' 
b'Blind XSS on image upload'

26 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'fedorpepa' 
b' sms LootDog.'

25 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'buggi3' 
b'Grafana SSRF in grafana.instamart.ru'

25 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'davscol94' 
b'SSRF in www.ucs.ru'

25 Dec 2020

b'Bumble' disclosed a bug submitted by b'covertlyovert' 
b'Identify unique user ID of all the profiles '

25 Dec 2020

b'Stripo Inc' disclosed a bug submitted by b'kapkan' 
b'Stored XSS at "Conditions " through "My Custom Rule" Field at [https://my.stripo.email/cabinet/#/template-editor/] in Template Editor.'

24 Dec 2020

b'Stripo Inc' disclosed a bug submitted by b'kapkan' 
b'Stored XSS at Template Editor in "Section Name" Field of Block element \'Accordion\'.'

24 Dec 2020

b'TikTok' disclosed a bug submitted by b'luizviana' 
b'CSRF for deleting videos'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java]: CWE-523 Insecure HSTS configuration '

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'jordyzomer' 
b'CodeQL query to detect SSRF in Python'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'mithrilwoodrat' 
b'Add check for disabled HTTPOnly setting in Tomcat'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'Java: CWE-918 - Server Side Request Forgery (SSRF)'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun' 
b'Java : add fastjson detection. Improve RemoteFlowSource class, support SpringMvc'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'd3lla' 
b'[javascript] CWE-90: CodeQL to detect LDAP Injection'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'logicmap' 
b'codeql-go: Expand Go standard library taint-tracking models to 63 packages, 554 models and 733 tests (from ~13 packages, ~103 models, ~50 tests)'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'Java: CWE-600 Uncaught servlet exception'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'd3lla' 
b'[javascript] CWE-614: CodeQL query to detect if cookies are sent without the flag secure being set'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs' 
b'Java: Add SSRF query for Java'

23 Dec 2020

1 ... 192 193 194 195 196 ... 693

BY DENIS WERNER - @NOBBD - IMPRESSUM