Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Doppler' disclosed a bug submitted by b'ibrahimauwal' 
b'email spoofing on doppler.team'

04 Jan 2021

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Incomplete fix for CVE-2020-12673 : Specially crafted NTML message leads to buffer over read'

04 Jan 2021

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Buffer overread off by one in `rpa_read_buffer`, incomplete fix for CVE-2020-12674'

04 Jan 2021

b'Twitter' disclosed a bug submitted by b'ryotak' 
b'Read-only application can publish/delete fleets'

04 Jan 2021

b'New Relic' disclosed a bug submitted by b'batuhan' 
b'Sending thousands of notifications with single request'

04 Jan 2021

b'ImpressCMS' disclosed a bug submitted by b'ex1st4nc3_' 
b'Other misconfiguration on Slack Server'

04 Jan 2021

b'Lark Technologies' disclosed a bug submitted by b'susant_wagle123' 
b'Hyper Link Injection while signup '

03 Jan 2021

b'Omise' disclosed a bug submitted by b'tw4v3sx' 
b'bypassing MessageToSeller length limit at link.omise.co leads to the seller not been able to check any transaction details , refund or open a dispute.'

02 Jan 2021

b'curl' disclosed a bug submitted by b'cjun' 
b'Integer overflows in tool_operate.c at line 1541'

01 Jan 2021

b'Rocket.Chat' disclosed a bug submitted by b'fabianfreyer' 
b'XSS leads to RCE on the RocketChat desktop client.'

01 Jan 2021

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'[intensedebate.com] SQL Injection Time Based on /changeReplaceOpt.php'

01 Jan 2021

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'[intensedebate.com] SQL Injection Time Based On /js/commentAction/'

01 Jan 2021

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'SQL Injection Union Based'

01 Jan 2021

b'TikTok' disclosed a bug submitted by b'gnux' 
b'HTML Injection on Company Name on Email'

31 Dec 2020

b'TikTok' disclosed a bug submitted by b'sniper302' 
b'CORS bypass on TikTok Ads Endpoint'

31 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'fatal0' 
b'Mail.ru for Android - Theft of sensitive data'

31 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'derision' 
b'SQL Injection at https://lite.r-keeper.ru/site_api/clients/derision/?lang=ru'

31 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'myasnikovalexey' 
b'CVE-2016-6415 on api-staging.plazius.ru [46.148.201.218]'

31 Dec 2020

b'TikTok' disclosed a bug submitted by b'luizviana' 
b'Cross Site Scripting using Email parameter in Ads endpoint 2'

30 Dec 2020

b'Badoo' disclosed a bug submitted by b'w2w' 
b'Possible (we need to wait for some time) takeover of subdomain badootech.badoo.com which is pointing to Medium servers'

30 Dec 2020

1 ... 239 240 241 242 243 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM