Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Keybase' disclosed a bug submitted by b'u3mur4' 
b'From nobody to somebody'

24 Jan 2020

b'Twitter' disclosed a bug submitted by b'zlz' 
b'Creating malformed URLs via new line character in-between two URLs leads to misrepresented hyperlinks in Tweets/DMs'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'logan5' 
b'CSRF combined with IDOR within Document Converter exposes files'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS/CSRF] filter content-type bypass in Files'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS/CSRF] filter content-type bypass in Files v2.0'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'pnig0s' 
b'Arbitrary local system file read on open-xchange server '

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] Mail <style> v2.0'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] Style/Event Filter Bypass v3.0'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'rceman' 
b'Stored-XSS with user interaction on [sandbox.open-xchange.com] via inserted link in mail'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] Pasting bootstrap in mail compose'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'amalyoman' 
b'No session expiry after log-out and session id exposed in URL'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] select/onchange in TinyMCE via set body'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] Forgot password link'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] Parameter Theme '

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] Style/Event Filter Bypass v4.0'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'Referer in /servlet/TestServlet'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[SSRF] PDF documentconverterws'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] Portal Widget Mail'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] content_disposition=inline in files'

24 Jan 2020

b'Starbucks' disclosed a bug submitted by b'moonlight323' 
b'Norway - store.starbucks.no - CSRF on email change'

23 Jan 2020

1 ... 290 291 292 293 294 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM