Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Node.js third-party modules' disclosed a bug submitted by b'chalker' 
b'[yarn] yarn.lock integrity & hash check logic is broken'

26 Feb 2020

b'Acronis' disclosed a bug submitted by b'vivek111' 
b'Accessing repository and other files by directory listing'

26 Feb 2020

b'Razer' disclosed a bug submitted by b'fpatrik' 
b'IDOR in eform.molpay.com leads to see other users application forms with private data'

25 Feb 2020

b'Razer' disclosed a bug submitted by b'l00ph0le' 
b'PHPInfo Page on www.razer.ru'

25 Feb 2020

b'Razer' disclosed a bug submitted by b'nnez' 
b'DOM-based XSS on https://zest.co.th/zestlinepay/'

25 Feb 2020

b'Mail.ru' disclosed a bug submitted by b'd3athstrok3' 
b'XSS via HTTP request version in account.my.games'

25 Feb 2020

b'Mail.ru' disclosed a bug submitted by b'orlserg' 
b'CSRF in attach phone API endpoint on delivery-club.ru'

25 Feb 2020

b'CompanyHub' disclosed a bug submitted by b'el_chapo' 
b'No Rate Limit On forgot Password Leading To Massive Email Flooding'

25 Feb 2020

b'Node.js' disclosed a bug submitted by b'alyssawilk' 
b'HTTP header values do not have trailing OWS trimmed'

24 Feb 2020

b'NordVPN' disclosed a bug submitted by b'alishah' 
b'No Rate Limit On Forgot Password Page Of affiliates.nordvpn.com'

24 Feb 2020

b'NordVPN' disclosed a bug submitted by b'mase289' 
b'Blind SSRF on debug.nordvpn.com due to misconfigured sentry instance'

24 Feb 2020

b'NordVPN' disclosed a bug submitted by b'enixium' 
b'Password Reset Link Works Multiple Times'

24 Feb 2020

b'ForeScout Technologies' disclosed a bug submitted by b'a_constant' 
b'HTML Injection & Content Spoofing'

24 Feb 2020

b'Node.js third-party modules' disclosed a bug submitted by b'kelotex' 
b'Several simple remote code execution in pdf-image'

24 Feb 2020

b'Valve' disclosed a bug submitted by b'splatt581' 
b'Malformed save files (.sav) allow to write files with arbitrary extensions and content in GoldSrc-based games.'

24 Feb 2020

b'Topcoder' disclosed a bug submitted by b'0x496' 
b'Cross Site Scripting via CVE-2018-5230 on https://apps.topcoder.com'

24 Feb 2020

b'NordVPN' disclosed a bug submitted by b'martinbydefault' 
b'Connection informaton is sent to a third-party service'

23 Feb 2020

b'Stellar.org' disclosed a bug submitted by b'suvrat7' 
b'Bypassing Verify Humans Page'

23 Feb 2020

b'Stellar.org' disclosed a bug submitted by b'ramakanthk35' 
b'Direct URL access to PDF files'

23 Feb 2020

b'Stellar.org' disclosed a bug submitted by b'vyshnav_nk' 
b'xss'

23 Feb 2020

1 ... 318 319 320 321 322 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM