Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'[api.tumblr.com] Denial of Service by cookies manipulation'

29 Nov 2020

b'Helium' disclosed a bug submitted by b'eissen5c' 
b'Race Condition of Transfer data Credits to Organization Leads to Add Extra free Data Credits to the Organization'

27 Nov 2020

b'Open-Xchange' disclosed a bug submitted by b'skr0x1c0' 
b'XSS on opening malicious OpenOffice presentation document'

27 Nov 2020

b'Open-Xchange' disclosed a bug submitted by b'skr0x1c0' 
b'SSRF protection bypass in /appsuite/api/oxodocumentfilter addfile action'

27 Nov 2020

b'Shopify' disclosed a bug submitted by b'ash_nz' 
b'Low Privileged Staff Member Can Export Billing Charges'

26 Nov 2020

b'Basecamp' disclosed a bug submitted by b'gammarex' 
b'Remote code execution on Basecamp.com'

26 Nov 2020

b'Basecamp' disclosed a bug submitted by b'hudmi' 
b'Attachments may be hijacked via AppCache+CookieBombing trick (bc3_production_blobs bucket)'

26 Nov 2020

b'Logitech' disclosed a bug submitted by b'bugra' 
b'IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id field'

26 Nov 2020

b'Palo Alto Software' disclosed a bug submitted by b'ph-hitachi' 
b'IDOR on notes to HTML injection'

26 Nov 2020

b'Bumble' disclosed a bug submitted by b'godzkid' 
b'On Singing up with a Phone number , The 4 digit OTP does not expires for a long time leading to an easy attack and make a verified account easilty'

25 Nov 2020

b'Zendesk' disclosed a bug submitted by b'imran_nazir' 
b' CSRF on developer.zendesk.com via Cache Deception'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'naategh' 
b'lenta_proxy information disclosure'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'paul_axe' 
b'Source code and internal credentials disclosure'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'elmahdi' 
b'Blind SSRF on http://info.ucs.ru/settings/check/'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'elmahdi' 
b'Redmin API Key Exposed In GIthub '

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'sicksec' 
b'Access User Tickets via IDOR in [widget.support.my.games]'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'sodium_' 
b'the same as #948259 - XSS at jsgames.mail.ru'

25 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'steal_wart' 
b'Information Disclosure '

25 Nov 2020

b'BugPoC' disclosed a bug submitted by b'virenpawar' 
b'Solution to the XSS Challenge '

24 Nov 2020

b'Helium' disclosed a bug submitted by b'eissen5c' 
b'Hyperlink Injection on Email Invitation'

24 Nov 2020

1 ... 275 276 277 278 279 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM