Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Maximum' disclosed a bug submitted by b'what_web' 
b'[www.werkenbijderet.nl] There is no rate limit for vacature-alert endpoints'

10 Jul 2020

b'Moneybird' disclosed a bug submitted by b'ant_pyne' 
b"Pending MFA logins aren't immediatly expired after a password change"

10 Jul 2020

b'TTS Bug Bounty' disclosed a bug submitted by b'justchillin' 
b'Blind SSRF on https://labs.data.gov/dashboard/Campaign/json_status/ Endpoint'

10 Jul 2020

b'GitHub Security Lab' disclosed a bug submitted by b'd3lla' 
b'[javascript] CWE-020: CodeQL query to detect missing origin validation in cross-origin communication via postMessage'

09 Jul 2020

b'Automattic' disclosed a bug submitted by b'fuzzme' 
b'[tumblr.com] 69< Firefox Only XSS Reflected'

09 Jul 2020

b'Nextcloud' disclosed a bug submitted by b'arezthehopebuster_' 
b'Full path disclosure vulnerability via Upload .htaccess file'

09 Jul 2020

b'Nextcloud' disclosed a bug submitted by b'jmdx' 
b'Non-admin users can trigger writes to memcached by entering a malicious server as a share URL'

09 Jul 2020

b'Zomato' disclosed a bug submitted by b'defparam' 
b'Stealing Zomato X-Access-Token: in Bulk using HTTP Request Smuggling on api.zomato.com'

09 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'notdeghost' 
b'CSRF Account Deletion on ??? Website'

09 Jul 2020

b'TTS Bug Bounty' disclosed a bug submitted by b'justchillin' 
b'Limited LFI'

09 Jul 2020

b'Urban Dictionary' disclosed a bug submitted by b'schirgel' 
b'Bypass voting restriction due to HTTP Header Injection'

08 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pi_hunter50' 
b'Unrestricted File Upload Leads to XSS & Potential RCE'

08 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'flav_' 
b'Subdomain takeover of ????'

08 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pi_hunter50' 
b'Stored XSS at ??????userprofile.aspx'

08 Jul 2020

b'Nextcloud' disclosed a bug submitted by b'hitman_47' 
b'Unrestricted file upload on the image of contacts'

08 Jul 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'CSRF Vulnerability on post creation page /community/create-post.json'

07 Jul 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'csrf in https://www.rockstargames.com/reddeadonline/feedback/submit.json'

07 Jul 2020

b'8x8' disclosed a bug submitted by b'bugify12334' 
b'Stored XSS on Company Logo'

07 Jul 2020

b'8x8' disclosed a bug submitted by b'hein_thant' 
b'Cross-site Scripting (XSS) - Reflected'

07 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'akash-labade' 
b'Subdomain takeover on tilda.geekbrains.ru and fl-change.geekbrains.ru'

07 Jul 2020

1 ... 281 282 283 284 285 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM