REPORTS
PROGRAMS
PUBLISHERS
Top10 publishers:
b'bobrov'
117
b'sp1d3rs'
86
b'geeknik'
83
b'linkks'
75
b'jobert'
70
b'nyymi'
62
b'someonenobbd'
62
b'ooooooo_q'
54
b'guido'
50
b'haxta4ok00'
49
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Zomato'
disclosed a bug submitted by
b'nikhar123'
b'Mathematical error found in meals for one'
29 Apr 2020
b'Ping Identity'
disclosed a bug submitted by
b'bug_digger21'
b'Google Maps API key leaked during device pairing'
28 Apr 2020
b'Stripo Inc'
disclosed a bug submitted by
b'nihadp'
b'CORS on my.stripo.email'
28 Apr 2020
b'Node.js third-party modules'
disclosed a bug submitted by
b'posix'
b'Prototype pollution attack (lodash)'
27 Apr 2020
b'Node.js third-party modules'
disclosed a bug submitted by
b'macasun'
b'Crash Node.js process from handlebars using a small and simple source'
27 Apr 2020
b'GitLab'
disclosed a bug submitted by
b'vakzz'
b'Arbitrary file read via the UploadsRewriter when moving and issue'
27 Apr 2020
b'Shopify'
disclosed a bug submitted by
b'danerh'
b'Session works after logout from Shopify account and password of online store is displayed'
27 Apr 2020
b'Roblox'
disclosed a bug submitted by
b'jfc5sb'
b'Insecure redirect rule results in bypassing ban redirect on certain pages'
26 Apr 2020
b'Slack'
disclosed a bug submitted by
b'akaki'
b'URL link spoofing'
26 Apr 2020
b'Node.js third-party modules'
disclosed a bug submitted by
b'visat'
b'[Total.js] Path traversal vulnerability allows to read files outside public directory'
25 Apr 2020
b'Node.js third-party modules'
disclosed a bug submitted by
b'mik317'
b'[git-promise] RCE via insecure command formatting'
25 Apr 2020
b'Cuvva'
disclosed a bug submitted by
b'fsm'
b'Time-limit Bypassing, Rate-limit Bypassing and Spamming at https://ops.cuvva.co'
24 Apr 2020
b'Roblox'
disclosed a bug submitted by
b'geekboy'
b'Subdomain Takeover to Authentication bypass '
23 Apr 2020
b'Uber'
disclosed a bug submitted by
b'healdb'
b'ubernycmarketplace.com is vulnerable to the Heartbleed Bug'
23 Apr 2020
b'Uber'
disclosed a bug submitted by
b'peroni'
b'Full Path and internal information disclosure+ SQLNet.log file disclose internal network information'
23 Apr 2020
b'Visma Public'
disclosed a bug submitted by
b'gamliel'
b'Able to continue user creation process after deleting the HTML element that shows the message that the session is closed'
23 Apr 2020
b'Omise'
disclosed a bug submitted by
b'rioncool22'
b'Signup with any email and enable 2FA without verifying email'
23 Apr 2020
b'Stripo Inc'
disclosed a bug submitted by
b'what_web'
b'[www.stripo.email] You can override the speed limit by adding the X-Forwarded-For header.'
23 Apr 2020
b'Ruby'
disclosed a bug submitted by
b'jeremyevans'
b'Variant of CVE-2013-0269 (Denial of Service and Unsafe Object Creation Vulnerability in JSON)'
23 Apr 2020
b'Mail.ru'
disclosed a bug submitted by
b'empty-jack'
b'[v7lk.relap.io] Sending arbitrary emails to any user'
22 Apr 2020
1
...
310
311
312
313
314
...
738
BY DENIS WERNER - @NOBBD -
IMPRESSUM