Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'nagli' 
b'Broken twitter link hijacking at https://games.mail.ru/pc/search/'

18 Sep 2020

b'Mail.ru' disclosed a bug submitted by b'sniper302' 
b'Log files Leaked In mcsblog.ru'

18 Sep 2020

b'Node.js third-party modules' disclosed a bug submitted by b'ansuj' 
b'[@knutkirkhorn/free-space] - Command Injection through Lack of Sanitization'

18 Sep 2020

b'Solana BBP' disclosed a bug submitted by b'crazy_criminal_bj-4545' 
b'email spoofing'

17 Sep 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'Java : add MongoDB injection sinks'

17 Sep 2020

b'Shopify' disclosed a bug submitted by b'wannacry0x01' 
b'Self XSS'

17 Sep 2020

b'New Relic' disclosed a bug submitted by b'k3ne' 
b'IDOR - User is able to download charts/dashboards from cross accounts'

17 Sep 2020

b'Nextcloud' disclosed a bug submitted by b'rbcafe' 
b'Clear text storage of proxy parameters and passwords'

16 Sep 2020

b'Nextcloud' disclosed a bug submitted by b'guoxuxin' 
b'Possible denial of service when entering a loooong password'

16 Sep 2020

b'Node.js third-party modules' disclosed a bug submitted by b'ermilov' 
b'[authmagic-timerange-stateless-core] Improper Authentication'

16 Sep 2020

b'Shopify' disclosed a bug submitted by b'jaka_tingkir' 
b'xss triggered in "myshopify.com/admin/product"'

15 Sep 2020

b'InnoGames' disclosed a bug submitted by b'mace' 
b'Cache Poisoning via uppercase letters in invalid path'

15 Sep 2020

b'Mail.ru' disclosed a bug submitted by b'r0hack' 
b'IDOR in tracking driver logs at city-mobil.ru'

15 Sep 2020

b'Mail.ru' disclosed a bug submitted by b'kanytu' 
b'Database read through provider misconfiguration'

15 Sep 2020

b'Mail.ru' disclosed a bug submitted by b'kanytu' 
b'Private files exposed to other apps'

15 Sep 2020

b'Mail.ru' disclosed a bug submitted by b'romesful' 
b'[icq.im] Reflected XSS via chat invite link'

15 Sep 2020

b'Shopify' disclosed a bug submitted by b'dwimmerlaik' 
b'CircleCI token in github repo allows for access to sensitive build information'

15 Sep 2020

b'Shopify' disclosed a bug submitted by b'say_ch33se' 
b'Email Confirmation Bypass in your-store.myshopify.com which leads to privilege escalation'

15 Sep 2020

b'Shopify' disclosed a bug submitted by b'ryat' 
b'A staff without export customers permissions can still export customers CSV file'

15 Sep 2020

b'Shopify' disclosed a bug submitted by b'risinghunter' 
b'staff can able to extend shopify trial period without admin permission'

15 Sep 2020

1 ... 301 302 303 304 305 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM