Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'PlayStation' disclosed a bug submitted by b'pwrofwon' 
b'Unrestricted access to quiesce functionality in dss.api.playstation.com REST API leads to unavailability of application'

30 Mar 2021

b'PlayStation' disclosed a bug submitted by b'vakzz' 
b'Reflected XSS on transact.playstation.com using postMessage from the opening window'

30 Mar 2021

b'PlayStation' disclosed a bug submitted by b'bugdiscloseguys' 
b'SSRF chained to hit internal host leading to another SSRF which allows to read internal images.'

30 Mar 2021

b'Uber' disclosed a bug submitted by b'm4ll0x0k' 
b'Critical Information disclosure of rtapi token for any user via https://video-support-staging.uber.com/video/api/getPopulousUser'

29 Mar 2021

b'Uber' disclosed a bug submitted by b'healdb' 
b'SQLI on desafio5estrelas.com '

29 Mar 2021

b'Basecamp' disclosed a bug submitted by b'h4x0r_dz' 
b'User can upload files even after closing his account'

29 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'thiennv' 
b'Reflected XSS on https://deti.mail.ru'

29 Mar 2021

b'Mail.ru' disclosed a bug submitted by b'dzmitry' 
b'Mail.Ru Email for Android: Injecting custom screen inside adding new account flow'

29 Mar 2021

b'PortSwigger Web Security' disclosed a bug submitted by b'issuefinder' 
b'HTML Injection in Swing can disclose netNTLM hash or cause DoS'

29 Mar 2021

b'Lark Technologies' disclosed a bug submitted by b'jin0ne' 
b'Server Side Request Forgery'

29 Mar 2021

b'HackerOne' disclosed a bug submitted by b'nagli' 
b'Reflected XSS and possible SSRF/XXE on https://events.hackerone.com/conferences/get_recording_slides_xml.xml?url=myserver/xss.xml'

26 Mar 2021

b'HackerOne' disclosed a bug submitted by b'nagli' 
b'Open Redirect on http://events.hackerone.com/redirect?url=https://naglinagli.github.io'

26 Mar 2021

b'HackerOne' disclosed a bug submitted by b'nagli' 
b'Stored XSS on https://events.hackerone.com'

26 Mar 2021

b'Open-Xchange' disclosed a bug submitted by b'northsea' 
b'Null pointer dereference in lib-sieve after calling sieve_binary_block_index'

26 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'ihsinme: CPP add query for: CPP Add query for CWE-20 Improper Input Validation '

25 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-297: Insecure LDAP endpoint configuration'

25 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun' 
b"Java: CWE-652 Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')"

25 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'torque59' 
b'Java: CWE-346 Queries to detect remote source flow to CORS Headers'

25 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b' Java : Add query for detecting Log Injection vulenrabilities'

25 Mar 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b' Java : Add query for detecting Log Injection vulenrabilities'

25 Mar 2021

1 ... 240 241 242 243 244 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM