Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'VK.com' disclosed a bug submitted by b'executor' 
b'XSS '

11 Feb 2021

b'QIWI' disclosed a bug submitted by b'xaleraf4ra' 
b'[z.tochka.com] Unlimited file uploads lead to malware executed'

11 Feb 2021

b'VK.com' disclosed a bug submitted by b'onlymalelove' 
b'Stored XSS .'

11 Feb 2021

b'Ruby on Rails' disclosed a bug submitted by b'tktech' 
b'HostAuthorization middleware does not suitably sanitize the Host / X-Forwarded-For header allowing redirection.'

11 Feb 2021

b'Ruby on Rails' disclosed a bug submitted by b'dee-see' 
b"Regular expression denial of service in ActiveRecord's PostgreSQL Money type"

11 Feb 2021

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[Java] CWE-295: Disabled certificate validation in JXBrowser'

10 Feb 2021

b'PayPal' disclosed a bug submitted by b'cr33pb0y' 
b'Reflect XSS and CSP Bypass on https://www.paypal.com/businesswallet/currencyConverter/ '

10 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mrsinister15' 
b'Bypassed a fix to gain access to PII of more than 100 Officers'

10 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'dianeme_' 
b'Register with non accepted email types on https://'

10 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'PII Leak of Personal at https://www.'

10 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Stored XSS via 64(?) vulnerable fields in leads to credential theft/account takeover'

10 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'skarsom' 
b'Insecure credentials on staging app at leads to application takeover'

10 Feb 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sleepnotf0und' 
b'Reflected XSS In https://'

10 Feb 2021

b'Lark Technologies' disclosed a bug submitted by b'mike12' 
b'RPC Implementation allows unauthenticated remote calls'

10 Feb 2021

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'[intensedebate.com] Open Redirect'

10 Feb 2021

b'Yelp' disclosed a bug submitted by b'alexbirsan' 
b'RCE on build server via misconfigured pip install'

09 Feb 2021

b'PayPal' disclosed a bug submitted by b'alexbirsan' 
b'RCE via npm misconfig -- installing internal libraries from the public registry'

09 Feb 2021

b'Omise' disclosed a bug submitted by b'malicious_mind528hz' 
b'assets/vendor.js file exposing sentry.io token and DNS and application id .'

09 Feb 2021

b'curl' disclosed a bug submitted by b'vepe' 
b'CVE-2020-8284: trusting FTP PASV responses'

09 Feb 2021

b'Lyst' disclosed a bug submitted by b'gamer7112' 
b'DOM XSS on http://talks.lystit.com'

09 Feb 2021

1 ... 261 262 263 264 265 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM