Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'raywando' 
b'Full account takeover on https://.mil'

25 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmedelmalky' 
b'Blind stored XSS due to insecure contact form at https://.mil leads to leakage of session token and '

25 Jan 2021

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nagli' 
b'Reflected XSS on https://html?url'

25 Jan 2021

b'New Relic' disclosed a bug submitted by b'wi11' 
b'HTML injection at Alert email'

25 Jan 2021

b'NordVPN' disclosed a bug submitted by b'cyku' 
b'Possible RCE through Windows Custom Protocol on Windows client'

25 Jan 2021

b'Stripo Inc' disclosed a bug submitted by b'kapkan' 
b"Able to use 'PREMIUM TEMPLATES' in 'FREE PLAN' at [https://my.stripo.email/cabinet/#/my-templates/]"

25 Jan 2021

b'Ruby' disclosed a bug submitted by b'hanno' 
b'Net::SMTP with tls allows forged certificates as long as the hostname matches'

25 Jan 2021

b'Mail.ru' disclosed a bug submitted by b'maxarr' 
b'XSS account.mail.ru'

24 Jan 2021

b'Mail.ru' disclosed a bug submitted by b'maxarr' 
b'XSS in message e.mail.ru '

24 Jan 2021

b'NordVPN' disclosed a bug submitted by b'kaimi' 
b'User password left in memory in plain text after GUI launch'

24 Jan 2021

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'[intensedebate.com] XSS Reflected POST-Based on update/tumblr2/{$id}'

23 Jan 2021

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'[intensedebate.com] No Rate Limit On The report Functionality Lead To Delete Any Comment When it is enabled'

23 Jan 2021

b'FetLife' disclosed a bug submitted by b'0x01hacker1' 
b'Google API key leaked to Public'

23 Jan 2021

b'O1 Labs' disclosed a bug submitted by b'zinminphyoo' 
b'SPF Records'

22 Jan 2021

b'h1-ctf' disclosed a bug submitted by b'akshansh' 
b'Taking Grinch Down To Save Holidays'

22 Jan 2021

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs' 
b'Golang : Add Email Content Injection query'

22 Jan 2021

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs' 
b'Golang : Add MongoDb NoSQL injection sinks'

22 Jan 2021

b'curl' disclosed a bug submitted by b'kugghjul' 
b'Poll loop/hang on incomplete HTTP header'

22 Jan 2021

b'Mail.ru' disclosed a bug submitted by b'explosive' 
b' , .'

22 Jan 2021

b'Mail.ru' disclosed a bug submitted by b'jayesh25' 
b'Improper Restriction of Excessive Authentication Attempts at http://terrafoot.ru/login.php (Rate Limit bypass via IP Rotation)'

22 Jan 2021

1 ... 263 264 265 266 267 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM