Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mapbox' disclosed a bug submitted by b'fransrosen' 
b'Test-scripts for postgis in mason-repository using unsafe unzip of content from unclaimed bucket creates potential RCE-issues'

28 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'hunter_py' 
b'HTML/iframe/XSS injection on https://www.ucs.ru/online/shelter/settings/check/'

28 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'sayaanalam' 
b"Blindy Replace User's Session with Attacker's Session"

28 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'samet' 
b'"????" + Unauthenticated Stored XSS in API at https://api.my.games/comments/v1/comments/update/'

28 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'urban_tramp' 
b'Content injection on shared event (calendar.mail.ru)'

28 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'sniper302' 
b'Stored XSS In mlbootcamp.ru'

28 Jul 2020

b'TTS Bug Bounty' disclosed a bug submitted by b'nagli' 
b'Wordpress Users Disclosure (/wp-json/wp/v2/users/) on data.gov'

28 Jul 2020

b'GitHub Security Lab' disclosed a bug submitted by b'porcupineyhairs' 
b'Python : Add query to detect Server Side Template Injection'

27 Jul 2020

b'8x8' disclosed a bug submitted by b'ameyanekar' 
b'IDOR: Adding Contacts to Other User Groups'

27 Jul 2020

b'Yelp' disclosed a bug submitted by b'walidhossain' 
b'JDBC credentials leaked via github'

27 Jul 2020

b'Automattic' disclosed a bug submitted by b'keer0k' 
b'DOM-Based XSS in tumblr.com'

27 Jul 2020

b'Stripo Inc' disclosed a bug submitted by b'3x3s' 
b'Cross-Site WebSocket Hijacking Lead to Steal XSRF-TOKEN'

27 Jul 2020

b'GitLab' disclosed a bug submitted by b'yvvdwf' 
b'Send arbitrary PUT requests when user clicks on a link'

27 Jul 2020

b'Helium' disclosed a bug submitted by b'w2w' 
b"Account takeover w/o interaction for a user that doesn't have 2fa enabled via 2fa linking and improper auth at /api/2fa/verify"

26 Jul 2020

b'IRCCloud' disclosed a bug submitted by b'do_some_hack' 
b'IDOR with Geolocation data not stripped from images'

26 Jul 2020

b'Weblate' disclosed a bug submitted by b'nafisaqil4' 
b'Open Github Repo Leaking WEBLATE SECRET KEY'

26 Jul 2020

b'Weblate' disclosed a bug submitted by b'code_monkey' 
b'Improper validation of unicode characters#2'

26 Jul 2020

b'Nextcloud' disclosed a bug submitted by b'nursoda' 
b'Contacts menu (not app) fails to restrict (to local groups) for contacts from federated servers'

25 Jul 2020

b'HackerOne' disclosed a bug submitted by b'kunal94' 
b'GraphQL field on Team node can be used to determine if External Program runs invite-only program'

25 Jul 2020

b'Ruby on Rails' disclosed a bug submitted by b'tenderlove' 
b'Untrusted users able to run pending migrations in production'

24 Jul 2020

1 ... 315 316 317 318 319 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM