Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'samtink' 
b'SAML Response Reuse on hackerone.com/users/saml/auth'

24 Jul 2020

b'Node.js third-party modules' disclosed a bug submitted by b'phra' 
b'SQL Injection or Denial of Service due to a Prototype Pollution'

24 Jul 2020

b'lemlist' disclosed a bug submitted by b'chackal' 
b'CVE-2019-19935 - DOM based XSS in the froala editor'

24 Jul 2020

b'Grammarly' disclosed a bug submitted by b'tomtenisse' 
b'Grammarly Keyboard for Android "Authorization Code with PKCE" flow implementation vulnerability that allows account takeover'

24 Jul 2020

b'lemlist' disclosed a bug submitted by b'try___for___impossible' 
b'Stored XSS at [ https://app.lemlist.com/campaigns/cam_QRS5caF2ca7MJtiLS/leads ] in " LINKEDIN URL" Field.'

24 Jul 2020

b'Curve' disclosed a bug submitted by b'praseudo7' 
b'Business Logic Flaw - A non premium user can change/update retailers to get cashback on all the retailers associated with Curve'

24 Jul 2020

b'NordVPN' disclosed a bug submitted by b'salahhasoneh' 
b'Getting SmartDNS for free from - join.nordvpn.com'

24 Jul 2020

b'Kubernetes' disclosed a bug submitted by b'lazydog' 
b'DoS for client-go jsonpath func'

24 Jul 2020

b'Smule' disclosed a bug submitted by b'done11' 
b'No Rate Limiting On Phone Number Login Leads to Login Bypass'

24 Jul 2020

b'Kubernetes' disclosed a bug submitted by b'cyberhawksec' 
b'Internal IP addresses range and AWS cluster region leaked in a Github repository '

24 Jul 2020

b'Kubernetes' disclosed a bug submitted by b'cyberhawksec' 
b'Hard coded Username and password in GiHub commit'

24 Jul 2020

b'Kubernetes' disclosed a bug submitted by b'lamscun' 
b'Fake email from <any_name>@kubernetes.io to any other email'

24 Jul 2020

b'Kubernetes' disclosed a bug submitted by b'blackviper21' 
b'There is any issue No valid SPF Records'

24 Jul 2020

b'Kubernetes' disclosed a bug submitted by b'rira12621' 
b'Github test clientID and clientSecret leaked'

24 Jul 2020

b'Kubernetes' disclosed a bug submitted by b'a1c3venom' 
b'Sensitive Information disclosure Through Config File'

24 Jul 2020

b'HackerOne' disclosed a bug submitted by b'lucenaxpl0it' 
b"Near to Infinite loop when changing Group's name that has API token as Team Member"

23 Jul 2020

b'Kubernetes' disclosed a bug submitted by b'wiardvanrij' 
b'"Self" DOS with large deployment and scaling'

23 Jul 2020

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla' 
b'[xps] Command Injection via insecure command concatenation'

23 Jul 2020

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla' 
b'[diskstats] Command Injection via insecure command concatenation'

23 Jul 2020

b'Kubernetes' disclosed a bug submitted by b'riderattitude' 
b'Private IP addresses Disclosure'

23 Jul 2020

1 ... 320 321 322 323 324 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM