Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'ub1k' 
b'Users information leak at sbermarket.ru'

01 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'0x01alka' 
b'/sql http://mx36.ucs.ru/ reflected XSS.'

01 Dec 2020

b'Showmax' disclosed a bug submitted by b'logicalh4x0r' 
b'WordPress admin is accessible without HTTP authentication'

01 Dec 2020

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'Store-XSS in error message of build-dependencies '

01 Dec 2020

b'GitLab' disclosed a bug submitted by b'ngalog' 
b'[Admin Panel] CSRF to resume/pause runner'

01 Dec 2020

b'Affirm' disclosed a bug submitted by b'yogesh_ojha' 
b'Absence of Token expiry leads to Unauthorized login Access'

01 Dec 2020

b'GitLab' disclosed a bug submitted by b'vaib25vicky' 
b'Unauthorized user is able to access schedule pipeline variables and values'

30 Nov 2020

b'Snapchat' disclosed a bug submitted by b'nahamsec' 
b'Server-Side Request Forgery using Javascript allows to exfill data from Google Metadata'

30 Nov 2020

b'BugPoC' disclosed a bug submitted by b'whitehat1443hacker' 
b'Strict Transport Security Misconfiguration'

30 Nov 2020

b'Stripo Inc' disclosed a bug submitted by b'kittytrace' 
b'No rate limiting for subscribe email + lead to Cross origin misconfiguration'

30 Nov 2020

b'Kubernetes' disclosed a bug submitted by b'todayisnew' 
b'Subdomain Takeover Via via Dangling NS records on Amazon Route 53 http://api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.io'

29 Nov 2020

b'Kubernetes' disclosed a bug submitted by b'derek0405' 
b'secret leaks in vsphere cloud controller manager log'

29 Nov 2020

b'Kubernetes' disclosed a bug submitted by b'purelyapplied' 
b'CVE-2019-11250 remains in effect.'

29 Nov 2020

b'Node.js third-party modules' disclosed a bug submitted by b'bilk0h' 
b'[last-commit-log] Command Injection'

29 Nov 2020

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'[api.tumblr.com] Denial of Service by cookies manipulation'

29 Nov 2020

b'Helium' disclosed a bug submitted by b'eissen5c' 
b'Race Condition of Transfer data Credits to Organization Leads to Add Extra free Data Credits to the Organization'

27 Nov 2020

b'Open-Xchange' disclosed a bug submitted by b'skr0x1c0' 
b'XSS on opening malicious OpenOffice presentation document'

27 Nov 2020

b'Open-Xchange' disclosed a bug submitted by b'skr0x1c0' 
b'SSRF protection bypass in /appsuite/api/oxodocumentfilter addfile action'

27 Nov 2020

b'Shopify' disclosed a bug submitted by b'ash_nz' 
b'Low Privileged Staff Member Can Export Billing Charges'

26 Nov 2020

b'Basecamp' disclosed a bug submitted by b'gammarex' 
b'Remote code execution on Basecamp.com'

26 Nov 2020

1 ... 223 224 225 226 227 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM