Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'New Relic' disclosed a bug submitted by b'skavans' 
b'NR-wide cross account access through misconfigured CORS-policy of multiple endpoints'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Stored XSS in notes (charts) because of insecure chart data JSON generation'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Passive stored XSS at Synthetics job result page (View resource)'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Unsafe charts embedding implementation leads to cross-account stored XSS and SSRF'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Cross-account stored XSS at notes (through "swf" note parameter)'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Stored XSS at Mobile (Versions tab)'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'CSRF at adding new role (user-management.service.newrelic.com)'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Site-wide clickjacking at IE11'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b"Urgent! Stored XSS at plugin's violations leading to account takeover"

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Stored XSS firing at transaction map (applicationName field)'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Stored XSS at APM key transactions list'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Stored XSS firing at the "Add chart to note" popup'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'CSTI at Plugin page leading to active stored XSS (Publisher name)'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'CSTI fix (#587829) bypass leading to stored XSS at plugins again'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'CSRF at acknowledging an incident'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Stored XSS at APM apps labels autocomplete dropdown (apps listing)'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'User can run monitors at private locations, which he has no access to'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Stored XSS firing if the error occurs when trying to delete the APM app'

13 Aug 2020

b'New Relic' disclosed a bug submitted by b'skavans' 
b'Stored XSS at APM applications listing'

13 Aug 2020

b'Imgur' disclosed a bug submitted by b'justchillin' 
b'SSRF in imgur video GIF conversion'

13 Aug 2020

1 ... 276 277 278 279 280 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM