Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Stripo Inc' disclosed a bug submitted by b'falcon_319' 
b'SSRF external interaction'

11 Dec 2020

b'Yoti' disclosed a bug submitted by b'duckoverflow' 
b'Multiple Vulnerabilities in (*www.yoti.com) - Leads to Leakage user admin Sensitive Exposure'

11 Dec 2020

b'Semrush' disclosed a bug submitted by b'a_d_a_m' 
b'Broken validation of user Id for JWT Token'

11 Dec 2020

b'OPPO' disclosed a bug submitted by b'darkwatcher' 
b'Information Disclosure at https://portal.finzfin.com/1.txt'

11 Dec 2020

b'Node.js third-party modules' disclosed a bug submitted by b'trygve_lie' 
b'Default behavior of Fastifys versioned routes can be used for cache poisoning when Fastify is used in combination with a http cache / CDN'

10 Dec 2020

b'Glassdoor' disclosed a bug submitted by b'ta8ahi' 
b'Site wide CSRF affecting both job seeker and Employer account on glassdoor.com'

10 Dec 2020

b'OPPO' disclosed a bug submitted by b'hetroublemakr' 
b'No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points'

10 Dec 2020

b'Starbucks' disclosed a bug submitted by b'ko2sec' 
b'Unrestricted File Upload Leads to RCE on mobile.starbucks.com.sg'

09 Dec 2020

b'VK.com' disclosed a bug submitted by b'onlymalelove' 
b'Reflected XSS /video'

09 Dec 2020

b'VK.com' disclosed a bug submitted by b'persewerance' 
b'XSS in vk.link'

09 Dec 2020

b'VK.com' disclosed a bug submitted by b'darkprism' 
b' auth.restore'

09 Dec 2020

b'Blueboard' disclosed a bug submitted by b'milap18' 
b'path traversal vulnerability adding /success-form after www.blueboard.com and skip request-a-demo page.'

09 Dec 2020

b'curl' disclosed a bug submitted by b'ospoco' 
b'CVE-2020-8286: Inferior OCSP verification'

09 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'moonwalker' 
b' '

09 Dec 2020

b'Slack' disclosed a bug submitted by b'demonia' 
b'Slack-Corp Heroku application disclosing limited info about company members'

09 Dec 2020

b'Automattic' disclosed a bug submitted by b'lu3ky-13' 
b'Sql injection on docs.atavist.com'

08 Dec 2020

b'Badoo' disclosed a bug submitted by b'th4nu_0x0' 
b'Race Condition on "Get free Badoo Premium" which allows to get more days of free premium for Free. '

07 Dec 2020

b'ImpressCMS' disclosed a bug submitted by b'kurdishhacked' 
b'Download full backup and Cross site scripting '

06 Dec 2020

b'OPPO' disclosed a bug submitted by b'fuomag9' 
b'Arbitrary thread deletion on c.realme.com'

06 Dec 2020

b'Automattic' disclosed a bug submitted by b'ajay_saycure' 
b'Able to comment/view in others support ticket at https://en.instagram-brand.com/requests/dashboard'

05 Dec 2020

1 ... 221 222 223 224 225 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM