Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Bumble' disclosed a bug submitted by b'covertlyovert' 
b'Identify unique user ID of all the profiles '

25 Dec 2020

b'Stripo Inc' disclosed a bug submitted by b'kapkan' 
b'Stored XSS at "Conditions " through "My Custom Rule" Field at [https://my.stripo.email/cabinet/#/template-editor/] in Template Editor.'

24 Dec 2020

b'Stripo Inc' disclosed a bug submitted by b'kapkan' 
b'Stored XSS at Template Editor in "Section Name" Field of Block element \'Accordion\'.'

24 Dec 2020

b'TikTok' disclosed a bug submitted by b'luizviana' 
b'CSRF for deleting videos'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java]: CWE-523 Insecure HSTS configuration '

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'jordyzomer' 
b'CodeQL query to detect SSRF in Python'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'mithrilwoodrat' 
b'Add check for disabled HTTPOnly setting in Tomcat'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'Java: CWE-918 - Server Side Request Forgery (SSRF)'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'jessforfun' 
b'Java : add fastjson detection. Improve RemoteFlowSource class, support SpringMvc'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'd3lla' 
b'[javascript] CWE-90: CodeQL to detect LDAP Injection'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'logicmap' 
b'codeql-go: Expand Go standard library taint-tracking models to 63 packages, 554 models and 733 tests (from ~13 packages, ~103 models, ~50 tests)'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'Java: CWE-600 Uncaught servlet exception'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'd3lla' 
b'[javascript] CWE-614: CodeQL query to detect if cookies are sent without the flag secure being set'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs' 
b'Java: Add SSRF query for Java'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'[Java] CWE-755: Query to detect Local Android DoS caused by NFE'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'ihsinme' 
b'CPP: CWE-191 into experimental this reveals a dangerous comparison'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'3,880 Pull Requests Generated to fix JHipster RNG Vulnerability CVE-2019-16303'

23 Dec 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'Java: QL Query Detector for JHipster Generated CVE-2019-16303'

23 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'weev3kyaw' 
b'Account takeover in cups.mail.ru using punycode characters'

23 Dec 2020

b'Mail.ru' disclosed a bug submitted by b'chaosbolt' 
b'SDC bypass on calendar.mail.ru'

23 Dec 2020

1 ... 271 272 273 274 275 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM