Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] content_disposition=inline in files'

24 Jan 2020

b'Starbucks' disclosed a bug submitted by b'moonlight323' 
b'Norway - store.starbucks.no - CSRF on email change'

23 Jan 2020

b'Badoo' disclosed a bug submitted by b'oo7hacker3' 
b'The login of Hotor Not is Vulnerable to bruteforce.'

23 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t' 
b'[klona] Prototype pollution'

23 Jan 2020

b'8x8' disclosed a bug submitted by b'0xelkomy' 
b'Disclosure of Users Information On Wordpress Api [https://jitsi.org/]'

23 Jan 2020

b'Mail.ru' disclosed a bug submitted by b'agametov' 
b'Boolean-based SQL Injection on relap.io'

22 Jan 2020

b'Lyst' disclosed a bug submitted by b'parzel' 
b'Subdomain takeover of storybook.lystit.com'

22 Jan 2020

b'Polymail, Inc.' disclosed a bug submitted by b'0xskull' 
b'Metadata leakage via IDOR'

22 Jan 2020

b'Mapbox' disclosed a bug submitted by b'renekroka' 
b'Stored XSS | api.mapbox.com | IE 11 | Styles name'

21 Jan 2020

b'MariaDB' disclosed a bug submitted by b'hanno' 
b'Ubuntu/Debian installation method allows key poisoning and code execution for network attacker'

21 Jan 2020

b'Revive Adserver' disclosed a bug submitted by b'jacopotediosi' 
b'Reflected XSS on www/delivery/afr.php'

21 Jan 2020

b'GitLab' disclosed a bug submitted by b'ooooooo_q' 
b'Double linking cause XSS (but blokeced by CSP in gitlab.com)'

20 Jan 2020

b'MobiSystems Ltd.' disclosed a bug submitted by b'kickino' 
b'open Firebase Database: msdict-dev.firebaseio.com'

20 Jan 2020

b'NordVPN' disclosed a bug submitted by b'nickelheck' 
b'Open redirect'

18 Jan 2020

b'Bumble' disclosed a bug submitted by b'0x3c3e' 
b'Bruteforce password recovery code'

18 Jan 2020

b'Vanilla' disclosed a bug submitted by b'h1_squirtle' 
b'Abusing "Report as abuse" functionality to delete any user\'s post.'

18 Jan 2020

b'Yelp' disclosed a bug submitted by b'md15ev' 
b'DoS of https://blog.yelp.com/ and other WP instances via CVE-2018-6389'

17 Jan 2020

b'Smule' disclosed a bug submitted by b'so_h1' 
b'Open redirect bypass & SSRF Security Vulnerability'

17 Jan 2020

b'DRIVE.NET, Inc.' disclosed a bug submitted by b'konqi' 
b'???????? XSS ? Business-????????, ?? ???????? ????????'

17 Jan 2020

b'Razer' disclosed a bug submitted by b'sambal0x' 
b"[Razer Pay Mobile App] Broken access control allowing other user's bank account to be deleted"

16 Jan 2020

1 ... 291 292 293 294 295 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM