Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Facebook' disclosed a bug submitted by b'yashrs' 
b'Facebook - Reputation Sync For #267890541047618'

02 Aug 2020

b'LINE' disclosed a bug submitted by b'ledz1996' 
b'Get-based SSRF limited to HTTP protocol on https://resizer.line-apps.com/form'

02 Aug 2020

b'curl' disclosed a bug submitted by b'brumbrum' 
b'curl overwrites local file with -J option if file non-readable, but file writable.'

01 Aug 2020

b'DuckDuckGo' disclosed a bug submitted by b'capuzsec' 
b'XSS on Videos IA'

31 Jul 2020

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'Arbitrary code execution via untrusted schemas in is-my-json-valid'

31 Jul 2020

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b"[is-my-json-valid] ReDoS via 'style' format"

31 Jul 2020

b'Dropcontact' disclosed a bug submitted by b'kapkan' 
b'Ngnix Server version disclosure.'

31 Jul 2020

b'Visma Public' disclosed a bug submitted by b'artebels' 
b'Reverse Tabnabbing in printing source document images'

31 Jul 2020

b'LINE' disclosed a bug submitted by b'hackerontwowheels' 
b'Path traversal in filename in LINE Mac client'

31 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'sudi' 
b'Sidekiq Dashboard Publicly accessible at http://shopper.staging.instamart.ru/sidekiq/'

31 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'avolume' 
b'Stored self XSS at auto.mail.ru using add_review functionality'

31 Jul 2020

b'Valve' disclosed a bug submitted by b'jameslll' 
b'ajaxgetachievementsforgame is not guarded for unreleased apps'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'scraps' 
b'Reflected XSS on ??????? page'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'the_unlucky_guy' 
b'Reflected XSS on https://???????/'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'chron0x' 
b'Exposed Docker Registry at https://????'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'r00tpgp' 
b'PulseSSL VPN Site with Compromised Creds @ ????'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ilyass01' 
b"RCE (Remote code execution) in one of DoD's websites "

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'lemonoftroy' 
b'HTML Injection leads to XSS on???'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'atbabers' 
b'Stored XSS on ????????helpdesk'

30 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'killinem_sec' 
b'SMTP Header Injection at http://abonement.ucs.ru'

30 Jul 2020

1 ... 282 283 284 285 286 ... 740

BY DENIS WERNER - @NOBBD - IMPRESSUM