Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'hitman_47' 
b'XSS through image upload of contacts using svg file'

17 Dec 2020

b'The Internet' disclosed a bug submitted by b'vovohelo' 
b'DOMPurify bypass'

17 Dec 2020

b'pixiv' disclosed a bug submitted by b'bcobain23' 
b'XSS reflected on [https://www.pixiv.net]'

17 Dec 2020

b'Node.js' disclosed a bug submitted by b'zeus1999' 
b'DNS Max Responses for DOS'

16 Dec 2020

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'The hacker has access to the administrative part of the management reports in publish report'

16 Dec 2020

b'Brave Software' disclosed a bug submitted by b'lalit2020' 
b'https://publishers.basicattentiontoken.org/favicon.ico is Vulnerable to CVE-2017-7529'

16 Dec 2020

b'Basecamp' disclosed a bug submitted by b'shrey3' 
b"Information Disclosure of Garbage Collection Cycle 'Again' "

16 Dec 2020

b'8x8' disclosed a bug submitted by b'stilou' 
b'Admin Reseller Account Disclosure'

15 Dec 2020

b'8x8' disclosed a bug submitted by b'stilou' 
b'vidyard api auth_token exposed'

15 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'javakhishvili' 
b'HTML Injection at "city-mobil.ru"'

15 Dec 2020

b'Basecamp' disclosed a bug submitted by b'ok_bye_now' 
b'Premium Email Address Check Bypass - Hey'

15 Dec 2020

b'Automattic' disclosed a bug submitted by b'atc_h1h1' 
b'GET /api/v2/url_info endpoint is vulnerable to Blind SSRF'

15 Dec 2020

b'TikTok' disclosed a bug submitted by b'lauritz' 
b'[CSRF] TikTok Careers Portal Account Takeover'

15 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'ub1k' 
b'Web cache information leakage at sbermarket.ru'

14 Dec 2020

b'Topcoder' disclosed a bug submitted by b'powerpuff' 
b'CSRF on https://apps.topcoder.com/wiki/users/editmyprofilepicture.action'

14 Dec 2020

b'Topcoder' disclosed a bug submitted by b'powerpuff' 
b'CSRF on https://apps.topcoder.com/wiki/pages/doattachfile.action'

14 Dec 2020

b'Glassdoor' disclosed a bug submitted by b'l0cpd' 
b"Reflected XSS at https://www.glassdoor.com/ via the 'numSuggestions' parameter"

14 Dec 2020

b'WordPress' disclosed a bug submitted by b'erwan_lr' 
b"Arbitrary change of blog's background image via CSRF"

14 Dec 2020

b'Imgur' disclosed a bug submitted by b'1a2er3d' 
b'Bypass subscription'

13 Dec 2020

b'Stripo Inc' disclosed a bug submitted by b'abhishek101' 
b'No rate limiting for confirmation email lead to huge Mass mailings'

11 Dec 2020

1 ... 220 221 222 223 224 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM