Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'mehulpanchal007' 
b'Reflected XSS in "keywords" parameter at "https://sbermarket.ru/metro/search"'

03 Aug 2020

b'Mail.ru' disclosed a bug submitted by b'weev3kyaw' 
b'Account takeover through password reset in cups.mail.ru'

03 Aug 2020

b'Mail.ru' disclosed a bug submitted by b'shuraros' 
b'relap.io IDOR'

03 Aug 2020

b'Nextcloud' disclosed a bug submitted by b'pshknst' 
b'Anonymous file drop page ignores user profile visibility restrictions'

03 Aug 2020

b'Facebook' disclosed a bug submitted by b'yashrs' 
b'Facebook - Reputation Sync For #267890541047618'

02 Aug 2020

b'LINE' disclosed a bug submitted by b'ledz1996' 
b'Get-based SSRF limited to HTTP protocol on https://resizer.line-apps.com/form'

02 Aug 2020

b'curl' disclosed a bug submitted by b'brumbrum' 
b'curl overwrites local file with -J option if file non-readable, but file writable.'

01 Aug 2020

b'DuckDuckGo' disclosed a bug submitted by b'capuzsec' 
b'XSS on Videos IA'

31 Jul 2020

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'Arbitrary code execution via untrusted schemas in is-my-json-valid'

31 Jul 2020

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b"[is-my-json-valid] ReDoS via 'style' format"

31 Jul 2020

b'Dropcontact' disclosed a bug submitted by b'kapkan' 
b'Ngnix Server version disclosure.'

31 Jul 2020

b'Visma Public' disclosed a bug submitted by b'artebels' 
b'Reverse Tabnabbing in printing source document images'

31 Jul 2020

b'LINE' disclosed a bug submitted by b'hackerontwowheels' 
b'Path traversal in filename in LINE Mac client'

31 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'sudi' 
b'Sidekiq Dashboard Publicly accessible at http://shopper.staging.instamart.ru/sidekiq/'

31 Jul 2020

b'Mail.ru' disclosed a bug submitted by b'avolume' 
b'Stored self XSS at auto.mail.ru using add_review functionality'

31 Jul 2020

b'Valve' disclosed a bug submitted by b'jameslll' 
b'ajaxgetachievementsforgame is not guarded for unreleased apps'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'scraps' 
b'Reflected XSS on ??????? page'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'the_unlucky_guy' 
b'Reflected XSS on https://???????/'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'chron0x' 
b'Exposed Docker Registry at https://????'

30 Jul 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'r00tpgp' 
b'PulseSSL VPN Site with Compromised Creds @ ????'

30 Jul 2020

1 ... 316 317 318 319 320 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM