Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nintendo' disclosed a bug submitted by b'mrnbayoh' 
b'[3DS][SSL] Use of uninitialized class member leads to RCE in eShop movie player'

18 Dec 2020

b'Nintendo' disclosed a bug submitted by b'mrnbayoh' 
b'[3DS][SSL] Improper certificate validation allows an attacker to perform MitM attacks'

18 Dec 2020

b'MariaDB' disclosed a bug submitted by b'gabriel_sztejnworcel' 
b'Named pipe connection inteception'

17 Dec 2020

b'TikTok' disclosed a bug submitted by b'chihuahua' 
b'Blind SSRF in ads.tiktok.com'

17 Dec 2020

b'Basecamp' disclosed a bug submitted by b'demonia' 
b'Bypass Tracking Blocker Protection Using Slashes Without Protocol On The Image Source.'

17 Dec 2020

b'Nextcloud' disclosed a bug submitted by b'hitman_47' 
b'XSS through image upload of contacts using svg file'

17 Dec 2020

b'The Internet' disclosed a bug submitted by b'vovohelo' 
b'DOMPurify bypass'

17 Dec 2020

b'pixiv' disclosed a bug submitted by b'bcobain23' 
b'XSS reflected on [https://www.pixiv.net]'

17 Dec 2020

b'Node.js' disclosed a bug submitted by b'zeus1999' 
b'DNS Max Responses for DOS'

16 Dec 2020

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'The hacker has access to the administrative part of the management reports in publish report'

16 Dec 2020

b'Brave Software' disclosed a bug submitted by b'lalit2020' 
b'https://publishers.basicattentiontoken.org/favicon.ico is Vulnerable to CVE-2017-7529'

16 Dec 2020

b'Basecamp' disclosed a bug submitted by b'shrey3' 
b"Information Disclosure of Garbage Collection Cycle 'Again' "

16 Dec 2020

b'8x8' disclosed a bug submitted by b'stilou' 
b'Admin Reseller Account Disclosure'

15 Dec 2020

b'8x8' disclosed a bug submitted by b'stilou' 
b'vidyard api auth_token exposed'

15 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'javakhishvili' 
b'HTML Injection at "city-mobil.ru"'

15 Dec 2020

b'Basecamp' disclosed a bug submitted by b'ok_bye_now' 
b'Premium Email Address Check Bypass - Hey'

15 Dec 2020

b'Automattic' disclosed a bug submitted by b'atc_h1h1' 
b'GET /api/v2/url_info endpoint is vulnerable to Blind SSRF'

15 Dec 2020

b'TikTok' disclosed a bug submitted by b'lauritz' 
b'[CSRF] TikTok Careers Portal Account Takeover'

15 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'ub1k' 
b'Web cache information leakage at sbermarket.ru'

14 Dec 2020

b'Topcoder' disclosed a bug submitted by b'powerpuff' 
b'CSRF on https://apps.topcoder.com/wiki/users/editmyprofilepicture.action'

14 Dec 2020

1 ... 243 244 245 246 247 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM