REPORTS
PROGRAMS
PUBLISHERS
Top10 publishers:
b'bobrov'
117
b'geeknik'
80
b'linkks'
75
b'jobert'
70
b'sp1d3rs'
68
b'someonenobbd'
62
b'nyymi'
55
b'jon_bottarini'
49
b'haxta4ok00'
48
b'netfuzzer'
48
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Phabricator'
disclosed a bug submitted by
b'codeprivate'
b'SSRF in notifications.server configuration'
15 May 2020
b'Visma Public'
disclosed a bug submitted by
b'base_64'
b'Read-only user can access payroll information without having access to payroll.'
15 May 2020
b'Clario'
disclosed a bug submitted by
b'rumiljonov'
b'Bypass front server restrictions and access to forbidden files and directories through X-Rewrite-Url/X-original-url header on account.mackeeper.com'
15 May 2020
b'Clario'
disclosed a bug submitted by
b'm_4_l_l_0_k'
b'CSS Injection on static.mackeeper.com - Potential XSS'
15 May 2020
b'Clario'
disclosed a bug submitted by
b'm_4_l_l_0_k'
b'IDOR at https://account.mackeeper.com/at/load-reports/profile/<profile_id> leaks information about devices/licenses'
15 May 2020
b'Clario'
disclosed a bug submitted by
b'karna__'
b'No rate limiting on password reset page'
15 May 2020
b'Clario'
disclosed a bug submitted by
b'karna__'
b'Account Takeover because of the mis-configuration on the Password Reset Page'
15 May 2020
b'Clario'
disclosed a bug submitted by
b'darkerhack'
b'Information disclosure of Internal php files on [mackeeper.com/blog/api/send-event]'
15 May 2020
b'Clario'
disclosed a bug submitted by
b'adelin30'
b'MK Site Cross-Site Scripting (XSS) in script context'
15 May 2020
b'Clario'
disclosed a bug submitted by
b'karna__'
b'Reflected XSS on stage.mackeeper.com'
15 May 2020
b'Ruby on Rails'
disclosed a bug submitted by
b'jessecampos'
b'XSS due to incomplete JS escaping'
14 May 2020
b'Palo Alto Software'
disclosed a bug submitted by
b'lordjerry0x01'
b'Unauthorised access to pagespeed global admin at https://webtools.paloalto.com/'
14 May 2020
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'alyssa_herrera'
b'SSN leak due to editable slides'
14 May 2020
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'r00tpgp'
b'Full Account Take-Over of ???????? Members via IDOR'
14 May 2020
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'mygf'
b'Stored Xss Vulnerability on ????????'
14 May 2020
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'usamasood'
b'[??????????] \xe2\x80\x94 Directory traversal via `/aerosol-bin/???????/display_directory_????_t.cgi`'
14 May 2020
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'usamasood'
b'[????????] \xe2\x80\x94 XSS on `/???????_flight/images` via `advanced_val` parameter'
14 May 2020
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'yghonem'
b'Domian Takeover in [???????]'
14 May 2020
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'rootuser'
b'Sensitive Information Leaking Through Navy Website. [?????]'
14 May 2020
b'U.S. Dept Of Defense'
disclosed a bug submitted by
b'rootuser'
b'Sensitive Information Leaking Through DARPA Website. [?????????]'
14 May 2020
1
...
258
259
260
261
262
...
692
BY DENIS WERNER - @NOBBD -
IMPRESSUM