Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitHub Security Lab' disclosed a bug submitted by b'crownpeanut' 
b'Dynamic reflection class'

24 Mar 2020

b'GitHub Security Lab' disclosed a bug submitted by b'grzegol' 
b'CodeQL query for finding ReDoS and Regex Injection vulnerabilities in Java'

24 Mar 2020

b'GitHub Security Lab' disclosed a bug submitted by b'crownpeanut' 
b'XPath Injection query in java'

24 Mar 2020

b'GitHub Security Lab' disclosed a bug submitted by b'crownpeanut' 
b'CWE-094 ScriptEngine in java'

24 Mar 2020

b'Stripo Inc' disclosed a bug submitted by b'dotsecurity' 
b'Blind SSRF while Creating Templates'

24 Mar 2020

b'Stripo Inc' disclosed a bug submitted by b'vijith0x0x' 
b'SSRF leads to internal port scan'

24 Mar 2020

b'Stripo Inc' disclosed a bug submitted by b'vijith0x0x' 
b'Email verification bypasa'

24 Mar 2020

b'Fortmatic Inc.' disclosed a bug submitted by b'pwny_sec' 
b'HTTP SMUGGLING EXPOSED HMAC/DOS '

24 Mar 2020

b'Every.org' disclosed a bug submitted by b'ahmd_halabi' 
b'Flaw in Change Email https://youtu.be/MMvlcHIGs2A'

24 Mar 2020

b'Qulture.Rocks' disclosed a bug submitted by b'ravi2443' 
b'Unrestricted File Upload in Chat Window'

23 Mar 2020

b'NordVPN' disclosed a bug submitted by b'khizer47' 
b'Expired Available Domains in nordvpn.com website code'

23 Mar 2020

b'Every.org' disclosed a bug submitted by b'harshitshah4' 
b'Improper email address verifiation while saving Account Details'

23 Mar 2020

b'Valve' disclosed a bug submitted by b'xpaw' 
b'Hidden scheduled partner events are propagated to Steam clients in CMsgClientClanState'

20 Mar 2020

b'HackerOne' disclosed a bug submitted by b'yashrs' 
b'Race Condition leads to undeletable group member'

20 Mar 2020

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'Unauthenticated users can obtain information about Checklist objects with unclaimed ChecklistCheck objects'

20 Mar 2020

b'PicsArt' disclosed a bug submitted by b'donhasan' 
b'User account compromised authentication bypass via oauth token impersonation'

20 Mar 2020

b'Myndr' disclosed a bug submitted by b'thilakesh' 
b'Reflected XSS in https://blocked.myndr.net'

19 Mar 2020

b'MariaDB' disclosed a bug submitted by b'badis' 
b'scripts loader (denial of service) vulnerability'

19 Mar 2020

b'OLX' disclosed a bug submitted by b'badis' 
b'load scripts DOS vulnerability'

19 Mar 2020

b'Reverb.com' disclosed a bug submitted by b'sandeep_hodkasia' 
b'Full account takeover'

19 Mar 2020

1 ... 311 312 313 314 315 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM