Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'n00bsec' 
b'Blind Stored XSS on iOS App due to Unsanitized Webview'

07 Mar 2020

b'Node.js' disclosed a bug submitted by b'erubinson' 
b'HTTP request smuggling using malformed Transfer-Encoding header'

07 Mar 2020

b'Nextcloud' disclosed a bug submitted by b'emilvirkki' 
b'Remote code execution via path traversal in Zip extraction in the Extract app'

07 Mar 2020

b'Visma Bug Bounty Program' disclosed a bug submitted by b'agnidevan' 
b'A non-administrator user can change his email even when it is restricted by an administrator'

06 Mar 2020

b'Visma Bug Bounty Program' disclosed a bug submitted by b'mrmj777' 
b'Administration page visible without authentication'

06 Mar 2020

b'Mail.ru' disclosed a bug submitted by b'n4sty' 
b'[api.pandao.ru] IDOR for order delivery address'

06 Mar 2020

b'Mail.ru' disclosed a bug submitted by b'n4sty' 
b'[pandao.ru] possibility to attach arbitrary phone number to account registered via social network'

06 Mar 2020

b'Mail.ru' disclosed a bug submitted by b'danila' 
b'Access to Tarantool'

05 Mar 2020

b'Greenhouse.io' disclosed a bug submitted by b'hacker2202' 
b'Subdomain Takeover on demo.greenhouse.io pointing to unbouncepages'

05 Mar 2020

b'Razer' disclosed a bug submitted by b'so_h1' 
b'[press.razer.com] Origin IP found, Cloudflare bypassed'

04 Mar 2020

b'Razer' disclosed a bug submitted by b'jackb898' 
b'Subdomain takeover at ftp.thx.com'

04 Mar 2020

b'Razer' disclosed a bug submitted by b's3cr3tsdn' 
b'SQLi at https://sea-web.gold.razer.com/demo-th/purchase-result.php via orderid Parameter'

04 Mar 2020

b'Razer' disclosed a bug submitted by b'zelzal' 
b'Aws bucket writable mobile.razer.com'

04 Mar 2020

b'Razer' disclosed a bug submitted by b'root0x0' 
b'dom based xss on [hello.merchant.razer.com]'

04 Mar 2020

b'Razer' disclosed a bug submitted by b's3cr3tsdn' 
b'Expired reCAPTCHA site key leads to Rate Limit Bypass and Email Enumeration'

04 Mar 2020

b'Razer' disclosed a bug submitted by b's3cr3tsdn' 
b'Reflected XSS at https://sea-web.gold.razer.com/cash-card/verify via channel parameter'

04 Mar 2020

b'NordVPN' disclosed a bug submitted by b'archerl' 
b'Reduced Payment amount while paying on Crypto Currencies'

03 Mar 2020

b'NordVPN' disclosed a bug submitted by b'mickeymouse001' 
b'UI Redressing (Clickjacking) vulnerability '

03 Mar 2020

b'NordVPN' disclosed a bug submitted by b'01alsanosi' 
b'Sensitive Information Disclosure on https://nordvpn.com/'

03 Mar 2020

b'' disclosed a bug submitted by b'arinerron2' 
b'Directory Traversal in uftpd 2.6-2.10'

03 Mar 2020

1 ... 277 278 279 280 281 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM