Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'h1-ctf' disclosed a bug submitted by b'akshansh' 
b'[H1-2006 2020] Connecting the dots to send hackers their Bug Bounty'

18 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'batee5a' 
b'[H1-2006 2020] Flag for H1-CTF'

18 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'njbooher' 
b'[H1-2006 2020] Writeup'

18 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'0xfd' 
b'[H1-2006 2020] Bounty Pay CTF challenge'

18 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'nukedx' 
b'[H1-2006 2020] Multiple vulnerabilities leading account takeover'

17 Jun 2020

b'h1-ctf' disclosed a bug submitted by b'sw33tlie' 
b'[H1-2006 2020] CTF Writeup!'

17 Jun 2020

b'Engel & V\xc3\xb6lkers Technology GmbH' disclosed a bug submitted by b'organiccrap' 
b'full path disclosure on world.engelvoelkers.com via error messages'

17 Jun 2020

b'Engel & V\xc3\xb6lkers Technology GmbH' disclosed a bug submitted by b'carambax' 
b'Information disclosure at https://printshop.engelvoelkers.com/packages/.bash_history'

17 Jun 2020

b'Open-Xchange' disclosed a bug submitted by b'zhutyra' 
b'SSRF - Guard - Unchecked WKS servers'

17 Jun 2020

b'Open-Xchange' disclosed a bug submitted by b'zhutyra' 
b'SSRF - Guard - Unchecked HKP servers'

17 Jun 2020

b'Open-Xchange' disclosed a bug submitted by b'zhutyra' 
b'XSS - Guard - Insufficient escaping of User-IDs from PGP Keys'

17 Jun 2020

b'Mail.ru' disclosed a bug submitted by b'r0hack' 
b'Time-Based SQL injection at city-mobil.ru'

17 Jun 2020

b'Engel & V\xc3\xb6lkers Technology GmbH' disclosed a bug submitted by b'j_m' 
b'[go3-stage.engelvoelkers.com] - Reflected XSS in /dGPS3/default.jsp'

17 Jun 2020

b'Engel & V\xc3\xb6lkers Technology GmbH' disclosed a bug submitted by b'j_m' 
b'[go3-intern.engelvoelkers.com] - Reflected XSS in /dGPS3/default.jsp'

17 Jun 2020

b'Engel & V\xc3\xb6lkers Technology GmbH' disclosed a bug submitted by b'j_m' 
b'[www.go3.engelvoelkers.com] - Reflected XSS in /dGPS3/default.jsp'

17 Jun 2020

b'Engel & V\xc3\xb6lkers Technology GmbH' disclosed a bug submitted by b'0xd0ff' 
b'XSS reflected in https://tableau.engelvoelkers.com/'

17 Jun 2020

b'Razer' disclosed a bug submitted by b's3cr3tsdn' 
b'???? OS Command Injection at https://sea-web.gold.razer.com/lab/ws-lookup via IP parameter'

17 Jun 2020

b'Starbucks' disclosed a bug submitted by b'neweq' 
b'Default credentials for the temporary POC site alipoc.stg.starbucks.com.cn permitted WAF bypass and RCE'

16 Jun 2020

b'Starbucks' disclosed a bug submitted by b'zlz' 
b'Misuse of an authentication cookie combined with a path traversal on app.starbucks.com permitted access to restricted data'

16 Jun 2020

b'Starbucks' disclosed a bug submitted by b'bayotop' 
b'Reflected DOM XSS on www.starbucks.co.uk'

16 Jun 2020

1 ... 294 295 296 297 298 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM