Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Basecamp' disclosed a bug submitted by b'hazimaslam' 
b'HTTP request smuggling on Basecamp 2 allows web cache poisoning'

28 Oct 2020

b'Basecamp' disclosed a bug submitted by b'hazimaslam' 
b'Unauthenticated request smuggling on launchpad.37signals.com'

28 Oct 2020

b'Mail.ru' disclosed a bug submitted by b'devirok' 
b' http://login.aa.mail.ru/logs/'

28 Oct 2020

b'Nextcloud' disclosed a bug submitted by b'dschuermann' 
b'PIN for passwordless WebAuthn is asked for but not verified'

28 Oct 2020

b'Nextcloud' disclosed a bug submitted by b'daniel_calvino_sanchez' 
b'The password of a mail share is not hashed if the password is given when the share is created'

28 Oct 2020

b'Nextcloud' disclosed a bug submitted by b'lynn-stephenson' 
b'Reduced purmations on encryption'

28 Oct 2020

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla' 
b'[gfc] Command Injection via insecure command formatting'

27 Oct 2020

b'Basecamp' disclosed a bug submitted by b'enigmaticjohn' 
b'Possible DOM XSS on app.hey.com'

27 Oct 2020

b'CS Money' disclosed a bug submitted by b'mvm' 
b'ReDoS at wiki.cs.money graphQL endpoint (AND probably a kind of command injection)'

27 Oct 2020

b'CS Money' disclosed a bug submitted by b'ahmd_halabi' 
b'Manipulate Uneditable Messages in Support'

27 Oct 2020

b'CS Money' disclosed a bug submitted by b'nnez' 
b'Site-wide CSRF on Safari due to CORS misconfiguration (not localhost)'

27 Oct 2020

b'Basecamp' disclosed a bug submitted by b'jouko' 
b'HEY.com email stored XSS'

27 Oct 2020

b'Mail.ru' disclosed a bug submitted by b'panya' 
b'Reflected XSS on https://e.mail.ru/compose/ via Body parameter'

27 Oct 2020

b'Mail.ru' disclosed a bug submitted by b'esetal' 
b'[combo.mail.ru] SMS code bruteforce'

27 Oct 2020

b'Mail.ru' disclosed a bug submitted by b'ther3d0ne' 
b'Stored XSS through fileupload'

27 Oct 2020

b'Mail.ru' disclosed a bug submitted by b'risinghunter' 
b'OTP bypass on user account deletion'

27 Oct 2020

b'Evernote' disclosed a bug submitted by b'kaulse' 
b'Non-production Open Database In Combination With XXE Leads To SSRF'

27 Oct 2020

b'Mail.ru' disclosed a bug submitted by b'magzhan' 
b'Cross-site Scripting (XSS) - DOM on https://account.mail.ru/user/garage?back_url=https://mail.ru'

27 Oct 2020

b'Node.js third-party modules' disclosed a bug submitted by b'johnssimon007' 
b'[nested-property] Prototype Pollution'

27 Oct 2020

b'NordVPN' disclosed a bug submitted by b'n33dm0n3y' 
b'Password Reset Link not expiring after changing the email Leads To Account Takeover'

27 Oct 2020

1 ... 286 287 288 289 290 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM