Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Maximum' disclosed a bug submitted by b'what_web' 
b'[www.werkenbijbakertilly.nl] Information Disclosure'

30 Jun 2020

b'Courier' disclosed a bug submitted by b'vaalici' 
b"disable test send feature if user's email address isn't verified"

30 Jun 2020

b'Helium' disclosed a bug submitted by b'chipped' 
b'Read-only user can delete higher privileged members using open DELETE /api/memberships/<membershipID> endpoint'

29 Jun 2020

b'Central Security Project' disclosed a bug submitted by b'longofo' 
b'OS Command Injection in Nexus Repository Manager 2.x -- Bypass for Nexus Repository Manage 2.14.15-01 Command Injection fix'

29 Jun 2020

b'NordVPN' disclosed a bug submitted by b'3viltwin' 
b'Misconfigured web directory allows to retrieve public proxy list'

29 Jun 2020

b'WordPress' disclosed a bug submitted by b'binit' 
b'Authenticated Stored Cross-site Scripting in bbPress'

29 Jun 2020

b'Mail.ru' disclosed a bug submitted by b'rainbow_json' 
b'[account.mail.ru] XSS-?????????? ? ????? ???????????'

29 Jun 2020

b'Mail.ru' disclosed a bug submitted by b'organdonor' 
b'MySQL username and password leaked on [2017.russianaicup.ru]'

29 Jun 2020

b'Mail.ru' disclosed a bug submitted by b'whitespots' 
b'Reflected XSS'

29 Jun 2020

b'Mail.ru' disclosed a bug submitted by b'rumiljonov' 
b'SSRF in filtering on relap.io'

29 Jun 2020

b'Vanilla' disclosed a bug submitted by b'flex0geek' 
b'Spoofing the redirect process using RTLO'

28 Jun 2020

b'Node.js third-party modules' disclosed a bug submitted by b'mahmoud0x00' 
b'[Uppy] Internal Server side request forgery (bypass of #786956)'

28 Jun 2020

b'Visma Public' disclosed a bug submitted by b'bayesian_hacker' 
b'SXSS using unsanitized `customer no` in eaccountingprinting.stage.vismaonline.com'

28 Jun 2020

b'Node.js third-party modules' disclosed a bug submitted by b'ahihi' 
b'bunyan - RCE via insecure command formatting'

27 Jun 2020

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'Java : CWE-548 - J2EE server directory listing enabled'

26 Jun 2020

b'Keybase' disclosed a bug submitted by b'op1um' 
b'Keybase client (Windows 10): Write files anywhere in userland using relative path in "download attachement" feature'

26 Jun 2020

b'8x8' disclosed a bug submitted by b'w2w' 
b'CRLF injection agentcrm.8x8.com'

26 Jun 2020

b'DuckDuckGo' disclosed a bug submitted by b'cujanovic' 
b'DOM XSS on duckduckgo.com search'

26 Jun 2020

b'Visma Public' disclosed a bug submitted by b'hungry_boy' 
b'Session replay vulnerability in app.workbox.dk domain'

26 Jun 2020

b'h1-ctf' disclosed a bug submitted by b's1r1u5' 
b'[H1-2006 2020] Got the flag'

25 Jun 2020

1 ... 281 282 283 284 285 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM