Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'byq' 
b'SSRF & LFR on city-mobil.ru'

14 Apr 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'0xpegg' 
b'[blog.makerdao.com] Multiple Vulnerabilities - Leads to leakage user admin sensitive exposure'

14 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[https://city-mobil.ru/taxiserv] Blind XSS into username'

14 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[panel.city-mobil.ru/admin/] Blind XSS into username'

14 Apr 2020

b'Legal Robot' disclosed a bug submitted by b'aninax' 
b'Cloudflare issue: Error 521 Ray ID: 2e7ea7f706ea4056 \xe2\x80\xa2 2016-09-25 12:59:55 UTC Web server is down'

13 Apr 2020

b'8x8' disclosed a bug submitted by b'sandrogauci' 
b'Outdated Coturn is vulnerable to known vulnerabilities (High)'

13 Apr 2020

b'Topcoder' disclosed a bug submitted by b'bonikia97' 
b'PII of Users Disclosure using "/members/invite/" endpoint'

13 Apr 2020

b'Stripo Inc' disclosed a bug submitted by b'doctor_spooky' 
b'Unrestricted File Upload on https://my.stripo.email and https://stripo.email'

13 Apr 2020

b'MTN Group' disclosed a bug submitted by b'itsafolic1' 
b'Account Take over of millions of MTN users account due to lack of Rate limiting when sending OTP code'

13 Apr 2020

b'Zenly' disclosed a bug submitted by b'ticzox' 
b'Insecure Storage and Overly Permissive API Keys in Android App'

12 Apr 2020

b'MTN Group' disclosed a bug submitted by b'kcz' 
b"OTP bypass - Unintended disclosure of OTP to client allows attacker to manage users' subscriptions"

11 Apr 2020

b'BCM Messenger' disclosed a bug submitted by b'dedsec69' 
b'IDOR leading to downloading of any attachment'

11 Apr 2020

b'8x8' disclosed a bug submitted by b'adam99' 
b'Insecure OAuth redirection at [admin.8x8.vc]'

10 Apr 2020

b'Nextcloud' disclosed a bug submitted by b'jlord87' 
b"User can delete data in shared folders he's not autorized to access"

10 Apr 2020

b'Ubiquiti Inc.' disclosed a bug submitted by b'giany' 
b'Unauthenticated request allows changing hostname'

10 Apr 2020

b'Nextcloud' disclosed a bug submitted by b'protex0r' 
b'Code injection in macOS Desktop Client '

10 Apr 2020

b'Nextcloud' disclosed a bug submitted by b'at5djl3pwjmunyutnoatp' 
b'"Secure View" aka "Hide Download" can be bypassed easily'

10 Apr 2020

b'Stripo Inc' disclosed a bug submitted by b'c1kada' 
b'SSRF in Export template to ActiveCampaign'

10 Apr 2020

b'Stripo Inc' disclosed a bug submitted by b'codeslayer137' 
b'HTTP Request Smuggling on my.stripo.email'

10 Apr 2020

b'Shopify' disclosed a bug submitted by b'ngalog' 
b'CSRF on connecting Paypal as Payment Provider'

10 Apr 2020

1 ... 315 316 317 318 319 ... 740

BY DENIS WERNER - @NOBBD - IMPRESSUM