Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Razer' disclosed a bug submitted by b's3cr3tsdn' 
b'[SSRF] Server-Side Request Forgery at https://sea-web.gold.razer.com/dev/simulator via notify_url Parameter'

08 Apr 2020

b'Razer' disclosed a bug submitted by b's3cr3tsdn' 
b'Source Code Disclosure'

08 Apr 2020

b'Razer' disclosed a bug submitted by b's3cr3tsdn' 
b'SQL injection at https://sea-web.gold.razer.com/demo-th/goto-e2p-web-api.php via Multiple Parameters'

08 Apr 2020

b'Razer' disclosed a bug submitted by b's3cr3tsdn' 
b'SQL Injection at api.easy2pay.co/add-on/get-sig.php via partner_id Parameter'

08 Apr 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'0xhost' 
b'xmlrpc.php file is enable it will used for (Denial of Service) and bruteforce attack'

07 Apr 2020

b'ForeScout Technologies' disclosed a bug submitted by b'enesdexh1' 
b'DOM XSS at www.forescout.com in Microsoft Edge and IE Browser'

07 Apr 2020

b'Uber' disclosed a bug submitted by b'0x3c3e' 
b'Subdomain takeover on mta1a1.spmail.uber.com'

06 Apr 2020

b'Uber' disclosed a bug submitted by b'overjt' 
b'Change the rating of any trip, therefore change the average driver rating'

06 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'cutoffurmind' 
b'PHP code injection at tz.mail.ru'

06 Apr 2020

b'Myndr' disclosed a bug submitted by b'droop3r' 
b"Open Redirect filter bypass through '\\' character via URL parameter"

06 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'cutoffurmind' 
b'3igames.mail.ru SQL Injection '

06 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'naategh' 
b'CSRF on https://market.my.games'

06 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'ms-13' 
b'Reflected XSS on am.ru and subdomains'

06 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'risinghunter' 
b'idor leads to leak order information'

06 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'haxta4ok00' 
b'SSRF/XSPA [parapa.mail.ru] 2'

06 Apr 2020

b'Visma Bug Bounty Program' disclosed a bug submitted by b'base_64' 
b'HTML-injection in PDF-export leads to LFI'

06 Apr 2020

b'Nextcloud' disclosed a bug submitted by b'iwallplace' 
b'Self xss'

05 Apr 2020

b'Unikrn' disclosed a bug submitted by b'root0x0' 
b'[crm.unikrn.com] Open Redirect'

05 Apr 2020

b'Shopify' disclosed a bug submitted by b'boredengineer21' 
b'Stored XSS through Facebook Page Connection'

04 Apr 2020

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Multiple buffer over reads in mbox_from_parse'

03 Apr 2020

1 ... 306 307 308 309 310 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM