Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Razer' disclosed a bug submitted by b'sambal0x' 
b'[Razer Pay Android App] Multiple vulnerabilities chained to allow "RedPacket" money to be stolen by a 3rd party'

30 Apr 2020

b'Roblox' disclosed a bug submitted by b'albertl' 
b'Malformed string sent through FireServer leads to server freezing/hanging'

29 Apr 2020

b'HackerOne' disclosed a bug submitted by b'bencode' 
b'Read-only team members can read all properties of webhooks'

29 Apr 2020

b'concrete5' disclosed a bug submitted by b'sunny0day' 
b'XSS in select attribute options'

29 Apr 2020

b'Zomato' disclosed a bug submitted by b'nikhar123' 
b'Mathematical error found in meals for one'

29 Apr 2020

b'Ping Identity' disclosed a bug submitted by b'bug_digger21' 
b'Google Maps API key leaked during device pairing'

28 Apr 2020

b'Stripo Inc' disclosed a bug submitted by b'nihadp' 
b'CORS on my.stripo.email'

28 Apr 2020

b'Node.js third-party modules' disclosed a bug submitted by b'posix' 
b'Prototype pollution attack (lodash)'

27 Apr 2020

b'Node.js third-party modules' disclosed a bug submitted by b'macasun' 
b'Crash Node.js process from handlebars using a small and simple source'

27 Apr 2020

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'Arbitrary file read via the UploadsRewriter when moving and issue'

27 Apr 2020

b'Shopify' disclosed a bug submitted by b'danerh' 
b'Session works after logout from Shopify account and password of online store is displayed'

27 Apr 2020

b'Roblox' disclosed a bug submitted by b'jfc5sb' 
b'Insecure redirect rule results in bypassing ban redirect on certain pages'

26 Apr 2020

b'Slack' disclosed a bug submitted by b'akaki' 
b'URL link spoofing'

26 Apr 2020

b'Node.js third-party modules' disclosed a bug submitted by b'visat' 
b'[Total.js] Path traversal vulnerability allows to read files outside public directory'

25 Apr 2020

b'Node.js third-party modules' disclosed a bug submitted by b'mik317' 
b'[git-promise] RCE via insecure command formatting'

25 Apr 2020

b'Cuvva' disclosed a bug submitted by b'fsm' 
b'Time-limit Bypassing, Rate-limit Bypassing and Spamming at https://ops.cuvva.co'

24 Apr 2020

b'Roblox' disclosed a bug submitted by b'geekboy' 
b'Subdomain Takeover to Authentication bypass '

23 Apr 2020

b'Uber' disclosed a bug submitted by b'healdb' 
b'ubernycmarketplace.com is vulnerable to the Heartbleed Bug'

23 Apr 2020

b'Uber' disclosed a bug submitted by b'peroni' 
b'Full Path and internal information disclosure+ SQLNet.log file disclose internal network information'

23 Apr 2020

b'Visma Public' disclosed a bug submitted by b'gamliel' 
b'Able to continue user creation process after deleting the HTML element that shows the message that the session is closed'

23 Apr 2020

1 ... 302 303 304 305 306 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM