Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'bencode' 
b'Read-only team members can read all properties of webhooks'

29 Apr 2020

b'concrete5' disclosed a bug submitted by b'sunny0day' 
b'XSS in select attribute options'

29 Apr 2020

b'Zomato' disclosed a bug submitted by b'nikhar123' 
b'Mathematical error found in meals for one'

29 Apr 2020

b'Ping Identity' disclosed a bug submitted by b'bug_digger21' 
b'Google Maps API key leaked during device pairing'

28 Apr 2020

b'Stripo Inc' disclosed a bug submitted by b'nihadp' 
b'CORS on my.stripo.email'

28 Apr 2020

b'Node.js third-party modules' disclosed a bug submitted by b'posix' 
b'Prototype pollution attack (lodash)'

27 Apr 2020

b'Node.js third-party modules' disclosed a bug submitted by b'macasun' 
b'Crash Node.js process from handlebars using a small and simple source'

27 Apr 2020

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'Arbitrary file read via the UploadsRewriter when moving and issue'

27 Apr 2020

b'Shopify' disclosed a bug submitted by b'danerh' 
b'Session works after logout from Shopify account and password of online store is displayed'

27 Apr 2020

b'Roblox' disclosed a bug submitted by b'jfc5sb' 
b'Insecure redirect rule results in bypassing ban redirect on certain pages'

26 Apr 2020

b'Slack' disclosed a bug submitted by b'akaki' 
b'URL link spoofing'

26 Apr 2020

b'Node.js third-party modules' disclosed a bug submitted by b'visat' 
b'[Total.js] Path traversal vulnerability allows to read files outside public directory'

25 Apr 2020

b'Node.js third-party modules' disclosed a bug submitted by b'mik317' 
b'[git-promise] RCE via insecure command formatting'

25 Apr 2020

b'Cuvva' disclosed a bug submitted by b'fsm' 
b'Time-limit Bypassing, Rate-limit Bypassing and Spamming at https://ops.cuvva.co'

24 Apr 2020

b'Roblox' disclosed a bug submitted by b'geekboy' 
b'Subdomain Takeover to Authentication bypass '

23 Apr 2020

b'Uber' disclosed a bug submitted by b'healdb' 
b'ubernycmarketplace.com is vulnerable to the Heartbleed Bug'

23 Apr 2020

b'Uber' disclosed a bug submitted by b'peroni' 
b'Full Path and internal information disclosure+ SQLNet.log file disclose internal network information'

23 Apr 2020

b'Visma Public' disclosed a bug submitted by b'gamliel' 
b'Able to continue user creation process after deleting the HTML element that shows the message that the session is closed'

23 Apr 2020

b'Omise' disclosed a bug submitted by b'rioncool22' 
b'Signup with any email and enable 2FA without verifying email'

23 Apr 2020

b'Stripo Inc' disclosed a bug submitted by b'what_web' 
b'[www.stripo.email] You can override the speed limit by adding the X-Forwarded-For header.'

23 Apr 2020

1 ... 310 311 312 313 314 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM