Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'todayisnew' 
b'Subdomain Takeover Via unclaimed Heroku Instance tim-exclusive.shopify.com'

24 Feb 2021

b'Legal Robot' disclosed a bug submitted by b'todayisnew' 
b'AWS hosting bucket for Legal Robots set as public browse and list contents: s3://legalrobot'

24 Feb 2021

b'Grab' disclosed a bug submitted by b'todayisnew' 
b' Subdomain Takeover Via Insecure CloudFront Distribution cdn.grab.com'

24 Feb 2021

b'Uber' disclosed a bug submitted by b'alexbirsan' 
b'RCE via npm misconfig -- installing internal libraries from the public registry'

24 Feb 2021

b'Uber' disclosed a bug submitted by b'orange' 
b'Pre-auth Remote Code Execution on multiple Uber SSL VPN servers'

24 Feb 2021

b'Uber' disclosed a bug submitted by b'm4k' 
b'Cookie Bombing cause DOS - businesses.uber.com'

24 Feb 2021

b'Uber' disclosed a bug submitted by b'gamer7112' 
b'Reflected XSS on https://www.uber.com'

24 Feb 2021

b'Uber' disclosed a bug submitted by b'molejarka' 
b'[experience.uber.com] Node.js source code disclosure & anonymous access to internal Uber documents, templates and tools'

23 Feb 2021

b'Uber' disclosed a bug submitted by b'cablej' 
b'[manage.jumpbikes.com] Blind XSS on Jump admin panel via user name'

23 Feb 2021

b'Rockstar Games' disclosed a bug submitted by b'bugstar' 
b'RDR2 game service method allows adding any player to a new Posse without consent'

23 Feb 2021

b'Node.js' disclosed a bug submitted by b'v6ak' 
b'DNS rebinding in --inspect (insufficient fix of CVE-2018-7160)'

23 Feb 2021

b'Acronis' disclosed a bug submitted by b'theevilbit' 
b'Acronis True Image Local Privilege Escalation via insecure folder permissions'

23 Feb 2021

b'Acronis' disclosed a bug submitted by b'theevilbit' 
b'True Image 2021 - LPE via XPC service communication'

23 Feb 2021

b'Lark Technologies' disclosed a bug submitted by b'imran_nisar' 
b'Stored XSS in Satisfaction Surveys via "Ask Reason for Dissatisfaction" option'

23 Feb 2021

b'Valve' disclosed a bug submitted by b'fe7ch' 
b'[CS 1.6] Map cycle abuse allows arbitrary file read/write'

22 Feb 2021

b'Keybase' disclosed a bug submitted by b'johnjhacking' 
b'Keybase /AppData/Local/Keybase/uploadtemps folder stores pasted photos'

22 Feb 2021

b'Zomato' disclosed a bug submitted by b'hoteyes' 
b'SQL Injection in www.hyperpure.com'

22 Feb 2021

b'Basecamp' disclosed a bug submitted by b'aisforarray' 
b'DNS Setup allows sending mail on behalf of other customers'

21 Feb 2021

b'Mail.ru' disclosed a bug submitted by b'n19ht-d3v1l' 
b'subdomain Takeover'

21 Feb 2021

b'Mail.ru' disclosed a bug submitted by b'n19ht-d3v1l' 
b'Subdomain Takeover'

21 Feb 2021

1 ... 255 256 257 258 259 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM