Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Rocket.Chat' disclosed a bug submitted by b'sonarsource' 
b'Post-Auth Stored XSS with User Interaction leads to Remote Code Execution'

30 Jun 2021

b'Sifchain' disclosed a bug submitted by b'coptech77' 
b'CORS misconfiguration'

29 Jun 2021

b'MyEtherWallet' disclosed a bug submitted by b'tushar_9905' 
b'PIN bypass'

29 Jun 2021

b'Zenly' disclosed a bug submitted by b'sdushantha' 
b'Google Maps API key stored as plain text leading to DOS and financial damage'

29 Jun 2021

b'Zivver' disclosed a bug submitted by b'njgadhiya' 
b'Cross-Site Scripting thorough XSSJacking/PasteJacking Technique '

29 Jun 2021

b'QIWI' disclosed a bug submitted by b'alexeypetrenko' 
b'Unauthenticated SSRF in jira.tochka.com leading to RCE in confluence.bank24.int'

29 Jun 2021

b'GitLab' disclosed a bug submitted by b'mzaheri' 
b'Responsible Disclosure of Privacy Leakage Issue'

29 Jun 2021

b'New Relic' disclosed a bug submitted by b'dsdh' 
b'Account Takeover via Email ID Change and Forgot Password Functionality'

28 Jun 2021

b'New Relic' disclosed a bug submitted by b'j0v' 
b'Untrusted deserialization issue when loading newrelic.yml file in Java agent leads to code execution on host'

28 Jun 2021

b'Informatica' disclosed a bug submitted by b'k4b33r_' 
b"F5 BIG-IP Cookie potentially reveal BigIP pool name, backend's IP address and port, routed domain."

28 Jun 2021

b'Unikrn' disclosed a bug submitted by b'stark303' 
b'Open URL Redirection'

28 Jun 2021

b'Homebrew' disclosed a bug submitted by b'sai545' 
b'clickjacking at brew.sh'

28 Jun 2021

b'Node.js third-party modules' disclosed a bug submitted by b'zerohex' 
b'Server-side Template Injection in lodash.js '

28 Jun 2021

b'Node.js third-party modules' disclosed a bug submitted by b'cris_semmle' 
b'Prototype Pollution Vulnerability in noble Package'

28 Jun 2021

b'Node.js third-party modules' disclosed a bug submitted by b'njgadhiya' 
b'Bypass of SSRF Vulnerability'

28 Jun 2021

b'Urban Company' disclosed a bug submitted by b'nispat' 
b'Exposed data of credit card details to hacker or attacker.'

28 Jun 2021

b'Acronis' disclosed a bug submitted by b'sbakhour' 
b'Self XSS on Acronis Cyber Cloud'

28 Jun 2021

b'Acronis' disclosed a bug submitted by b'sbakhour' 
b'Stored XSS in backup scanning plan name'

28 Jun 2021

b'Zego' disclosed a bug submitted by b'ian' 
b'Subdomain takeover of v.zego.com'

26 Jun 2021

b'HackerOne' disclosed a bug submitted by b'tester2020' 
b'Stored XSS in IE11 on hackerone.com via custom fields '

24 Jun 2021

1 ... 217 218 219 220 221 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM