Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'PII Leak via https://????????'

11 May 2020

b'Visma Public' disclosed a bug submitted by b'semsem123' 
b'Unrestricted file upload leads to Stored XSS'

11 May 2020

b'MTN Group' disclosed a bug submitted by b'tp9222' 
b'Week Passwords generated by password reset function'

09 May 2020

b'Node.js third-party modules' disclosed a bug submitted by b'mik317' 
b'[logkitty] RCE via insecure command formatting'

09 May 2020

b'Vercel' disclosed a bug submitted by b'elmahdi' 
b'through %09 Character the attacker is able to steal Github Token [ Account Takeover ]'

08 May 2020

b'Badoo' disclosed a bug submitted by b'0x3c3e' 
b'Leak of authorization urls leads to account takeover'

08 May 2020

b'Visma Public' disclosed a bug submitted by b'hungry_boy' 
b'Ability to delete projects from Archived companies (Read only version)'

08 May 2020

b'Mail.ru' disclosed a bug submitted by b'adiosmf' 
b'XSS at go.mail.ru'

08 May 2020

b'Mail.ru' disclosed a bug submitted by b'organdonor' 
b'Unrestricted file upload on [ambassador.mail.ru] '

08 May 2020

b'Mail.ru' disclosed a bug submitted by b'01alsanosi' 
b'Stored xss on https://go.mail.ru/'

08 May 2020

b'Mail.ru' disclosed a bug submitted by b'shaktiranjan867' 
b'xss in ub.icq.net'

08 May 2020

b'BTFS' disclosed a bug submitted by b'dagamosst90' 
b'misconfigured CORS let to HPP and SOP bypass'

07 May 2020

b'Imgur' disclosed a bug submitted by b'gennaro' 
b'Sourcemaps and Unminified Source Code Exposed on Pages'

07 May 2020

b'Pornhub' disclosed a bug submitted by b'renekroka' 
b'Self-XSS to Good-XSS - pornhub.com'

07 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'l00ph0le' 
b'Command Injection (via CVE-2019-11510 and CVE-2019-11539)'

07 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sw33tlie' 
b'Remote Code Execution via Insecure Deserialization in Telerik UI '

07 May 2020

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[https://city-mobil.ru/taxiserv] IDOR leads to information disclosure'

07 May 2020

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[city-mobil.ru/taxiserv/] IDOR leads to driver account takeover'

07 May 2020

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[https://fleet.city-mobil.ru] Stored XSS into driver mailing'

07 May 2020

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[city-mobil.ru/taxiserv/] Disclosure information about drivers'

07 May 2020

1 ... 262 263 264 265 266 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM