Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'moonwalker' 
b'IDOR zakazaka ( )'

28 Dec 2020

b'Shopify' disclosed a bug submitted by b'tems' 
b'Inject page in admin panel via Shopify.API.pushState [New Payload]'

27 Dec 2020

b'Shopify' disclosed a bug submitted by b'tems' 
b'Inject page in admin panel via Shopify.API.pushState with protocol invalid'

27 Dec 2020

b'Automattic' disclosed a bug submitted by b'subnetix' 
b'Tab nabbing via window.opener.location (target "_blank")'

26 Dec 2020

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'[tumblr.com] CSRF in /svc/user/filtered_content'

26 Dec 2020

b'Logitech' disclosed a bug submitted by b'sudi' 
b'CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]'

26 Dec 2020

b'Logitech' disclosed a bug submitted by b'sudi' 
b'Stored XSS in [https://streamlabs.com/dashboard#/*goal] pages'

26 Dec 2020

b'Nextcloud' disclosed a bug submitted by b'hitman_47' 
b'XSS through image upload of contacts using svg file with png extension '

26 Dec 2020

b'Automattic' disclosed a bug submitted by b'ahmd_halabi' 
b'XSS in Email Input [intensedebate.com]'

26 Dec 2020

b'CS Money' disclosed a bug submitted by b'gatolouco' 
b'Blind XSS on image upload'

26 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'fedorpepa' 
b' sms LootDog.'

25 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'buggi3' 
b'Grafana SSRF in grafana.instamart.ru'

25 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'davscol94' 
b'SSRF in www.ucs.ru'

25 Dec 2020

b'Bumble' disclosed a bug submitted by b'covertlyovert' 
b'Identify unique user ID of all the profiles '

25 Dec 2020

b'Stripo Inc' disclosed a bug submitted by b'kapkan' 
b'Stored XSS at "Conditions " through "My Custom Rule" Field at [https://my.stripo.email/cabinet/#/template-editor/] in Template Editor.'

24 Dec 2020

b'Stripo Inc' disclosed a bug submitted by b'kapkan' 
b'Stored XSS at Template Editor in "Section Name" Field of Block element \'Accordion\'.'

24 Dec 2020

b'TikTok' disclosed a bug submitted by b'luizviana' 
b'CSRF for deleting videos'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java]: CWE-523 Insecure HSTS configuration '

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'jordyzomer' 
b'CodeQL query to detect SSRF in Python'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'mithrilwoodrat' 
b'Add check for disabled HTTPOnly setting in Tomcat'

23 Dec 2020

1 ... 217 218 219 220 221 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM