Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Dropcontact' disclosed a bug submitted by b'kapkan' 
b'Ngnix Server version disclosure.'

31 Jul 2020

b'Visma Public' disclosed a bug submitted by b'artebels' 
b'Reverse Tabnabbing in printing source document images'

31 Jul 2020

b'LINE' disclosed a bug submitted by b'hackerontwowheels' 
b'Path traversal in filename in LINE Mac client'

31 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'sudi' 
b'Sidekiq Dashboard Publicly accessible at http://shopper.staging.instamart.ru/sidekiq/'

31 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'avolume' 
b'Stored self XSS at auto.mail.ru using add_review functionality'

31 Jul 2020

b'Valve' disclosed a bug submitted by b'jameslll' 
b'ajaxgetachievementsforgame is not guarded for unreleased apps'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'scraps' 
b'Reflected XSS on ??????? page'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'the_unlucky_guy' 
b'Reflected XSS on https://???????/'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'chron0x' 
b'Exposed Docker Registry at https://????'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'r00tpgp' 
b'PulseSSL VPN Site with Compromised Creds @ ????'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ilyass01' 
b"RCE (Remote code execution) in one of DoD's websites "

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'lemonoftroy' 
b'HTML Injection leads to XSS on???'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'atbabers' 
b'Stored XSS on ????????helpdesk'

30 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'killinem_sec' 
b'SMTP Header Injection at http://abonement.ucs.ru'

30 Jul 2020

b'Courier' disclosed a bug submitted by b'ni4hadpd' 
b'Bypass Too Many Requests Sign Up '

30 Jul 2020

b'Shopify' disclosed a bug submitted by b'cyber__sec' 
b'Stored XSS in my staff name fired in another your internal panel'

29 Jul 2020

b'8x8' disclosed a bug submitted by b'b1ackgamba' 
b'SQL injection (stacked queries) in the export to Excel functionality on Vidyo Server'

29 Jul 2020

b'Vanilla' disclosed a bug submitted by b'minoto' 
b'Stealing the ip addres from users'

29 Jul 2020

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'Fastify uses allErrors: true ajv configuration by default which is susceptible to DoS'

29 Jul 2020

b'Nextcloud' disclosed a bug submitted by b'xcheater' 
b'Possible denial of service when entering a loooong password'

29 Jul 2020

1 ... 315 316 317 318 319 ... 773

BY DENIS WERNER - @NOBBD - IMPRESSUM