Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'Java: CWE-522 Insecure basic authentication'

20 Aug 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'[javascript] CWE-117: CodeQL query to detect Log Injection'

20 Aug 2020

b'Dropcontact' disclosed a bug submitted by b'n1m0' 
b"Dropcontact's disclosed report is exposing Private/Confidential information"

20 Aug 2020

b'DuckDuckGo' disclosed a bug submitted by b'sijisu' 
b'DOM XSS on duckduckgo.com search'

20 Aug 2020

b'Dropcontact' disclosed a bug submitted by b'try___for_impossible' 
b"API key is not validated for C.R.M integration [Pipedrive] of LOGGED IN USER, A user can use another USER'S API key for this operation."

20 Aug 2020

b'Twitter' disclosed a bug submitted by b'filedescriptor' 
b'Insufficient validation on Digits bridge'

20 Aug 2020

b'Node.js third-party modules' disclosed a bug submitted by b'0x1337r00t' 
b'[supermixer] Prototype pollution'

20 Aug 2020

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla' 
b'[extra-ffmpeg] Command Injection via insecure command formatting'

20 Aug 2020

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla' 
b'[object-path-set] Prototype pollution'

20 Aug 2020

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla' 
b'[vboxmanage.js] Command Injection via insecure command concatenation'

20 Aug 2020

b'Shopify' disclosed a bug submitted by b'francisbeaudoin' 
b'Ability to generate shipping labels in another store orders'

19 Aug 2020

b'WakaTime' disclosed a bug submitted by b'harshita174' 
b'Rate Limit too lenient for endpoint sending emails'

19 Aug 2020

b'Avito' disclosed a bug submitted by b'harshita174' 
b'Missing SPF Records'

19 Aug 2020

b'Nextcloud' disclosed a bug submitted by b'ja3far' 
b'Denial of Service when entring an Array in email at seetings'

19 Aug 2020

b'Valve' disclosed a bug submitted by b'gamer7112' 
b"[GoldSrc] RCE via 'spk' Console Command"

19 Aug 2020

b'Valve' disclosed a bug submitted by b'gamer7112' 
b'[GoldSrc] RCE via malformed BSP file'

19 Aug 2020

b'Valve' disclosed a bug submitted by b'irukandjisecresearch' 
b"Buffer overflow In hl.exe's launch -game argument allows an attacker to execute arbitrary code locally or from browser"

19 Aug 2020

b'Yelp' disclosed a bug submitted by b'hk755a' 
b"CRITICAL Insecure Direct Object Reference (I.D.O.R) - Link Other User's Credit Card "

19 Aug 2020

b'Yelp' disclosed a bug submitted by b'hk755a' 
b"I.D.O.R To Order,Book,Buy,reserve On YELP FOR FREE (UNAUTHORIZED USE OF OTHER USER'S CREDIT CARD)"

19 Aug 2020

b'Yelp' disclosed a bug submitted by b'hk755a' 
b"I.D.O.R TO EDIT ALL USER'S CREDIT CARD INFORMATION+(Partial credit card info disclosure)"

19 Aug 2020

1 ... 310 311 312 313 314 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM