Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'yahe' 
b'Improper confidentiality protection of server-side encryption keys'

13 Nov 2020

b'Nextcloud' disclosed a bug submitted by b'yahe' 
b'Improper integrity protection of server-side encryption keys'

13 Nov 2020

b'BugPoC' disclosed a bug submitted by b'd1r3wolf' 
b'Solution for XSS challenge wacky.buggywebsite.com'

13 Nov 2020

b'LINE' disclosed a bug submitted by b'dhbd88' 
b'CORS misconfiguration leads to users information disclosure at https://studyroom.line.me'

13 Nov 2020

b'BugPoC' disclosed a bug submitted by b'machinexa' 
b'Reflected XSS at wacky.buggywebsite.com/frame.html'

12 Nov 2020

b'BugPoC' disclosed a bug submitted by b'effectrenan' 
b'XSS Challenge'

12 Nov 2020

b'CS Money' disclosed a bug submitted by b'rootishere' 
b'Content Spoofing/Text Injection in https://support.cs.money and JS file not minified and uglyfied which makes it clearly readable '

12 Nov 2020

b'QIWI' disclosed a bug submitted by b'circuit' 
b'IDOR '

12 Nov 2020

b'QIWI' disclosed a bug submitted by b'circuit' 
b' - access '

12 Nov 2020

b'QIWI' disclosed a bug submitted by b'circuit' 
b'[qiwi.me] Stored XSS'

12 Nov 2020

b'' disclosed a bug submitted by b'oversecured' 
b'Android: Explanation of Access to app protected components vulnerability'

11 Nov 2020

b'Slack' disclosed a bug submitted by b'cyanpiny' 
b'DoS on the Direct Messages'

11 Nov 2020

b'Mail.ru' disclosed a bug submitted by b'olidayw' 
b"Disclosure of personal support email addresses on 'support-fleet.city-mobil.ru'"

11 Nov 2020

b'Node.js third-party modules' disclosed a bug submitted by b'ryotak' 
b'[node-downloader-helper] Path traversal via Content-Disposition header'

11 Nov 2020

b'Google' disclosed a bug submitted by b'oversecured' 
b"CVE-2020-8913 - Persistent arbitrary code execution in Android's Google Play Core Library: details, explanation and the PoC"

11 Nov 2020

b'Slack' disclosed a bug submitted by b'secalert' 
b'Access to some Slack workspace metadata and settings available to unauthorized parties'

10 Nov 2020

b'Slack' disclosed a bug submitted by b'bubbounty' 
b'Possibility to freeze/crash the host system of all Slack Desktop users easily'

10 Nov 2020

b'Slack' disclosed a bug submitted by b'pclinger' 
b'Uninstalling Slack for Windows (64-bit), then reinstalling keeps you logged in without authentication'

10 Nov 2020

b'BugPoC' disclosed a bug submitted by b'pirateducky' 
b'csp bypass leads to xss on wacky.buggywebsite.com'

10 Nov 2020

b'VK.com' disclosed a bug submitted by b'davscol94' 
b'XSS Reflected in m.vk.com'

10 Nov 2020

1 ... 282 283 284 285 286 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM