Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Razer' disclosed a bug submitted by b's3cr3tsdn' 
b'[api.easy2pay.co] SQL Injection at fortumo via TransID parameter [Bypassing Signature Validation????]'

30 Jun 2020

b'Stripo Inc' disclosed a bug submitted by b'what_web' 
b'[www.stripo.email] You can bypass the speed limit by changing the IP.'

30 Jun 2020

b'Stripo Inc' disclosed a bug submitted by b'x25s' 
b'SSRF in my.stripo.email'

30 Jun 2020

b'Maximum' disclosed a bug submitted by b'what_web' 
b'[www.werkenbijbakertilly.nl] Information Disclosure'

30 Jun 2020

b'Courier' disclosed a bug submitted by b'vaalici' 
b"disable test send feature if user's email address isn't verified"

30 Jun 2020

b'Helium' disclosed a bug submitted by b'chipped' 
b'Read-only user can delete higher privileged members using open DELETE /api/memberships/<membershipID> endpoint'

29 Jun 2020

b'Central Security Project' disclosed a bug submitted by b'longofo' 
b'OS Command Injection in Nexus Repository Manager 2.x -- Bypass for Nexus Repository Manage 2.14.15-01 Command Injection fix'

29 Jun 2020

b'NordVPN' disclosed a bug submitted by b'3viltwin' 
b'Misconfigured web directory allows to retrieve public proxy list'

29 Jun 2020

b'WordPress' disclosed a bug submitted by b'binit' 
b'Authenticated Stored Cross-site Scripting in bbPress'

29 Jun 2020

b'Mail.ru' disclosed a bug submitted by b'rainbow_json' 
b'[account.mail.ru] XSS-?????????? ? ????? ???????????'

29 Jun 2020

b'Mail.ru' disclosed a bug submitted by b'organdonor' 
b'MySQL username and password leaked on [2017.russianaicup.ru]'

29 Jun 2020

b'Mail.ru' disclosed a bug submitted by b'whitespots' 
b'Reflected XSS'

29 Jun 2020

b'Mail.ru' disclosed a bug submitted by b'rumiljonov' 
b'SSRF in filtering on relap.io'

29 Jun 2020

b'Vanilla' disclosed a bug submitted by b'flex0geek' 
b'Spoofing the redirect process using RTLO'

28 Jun 2020

b'Node.js third-party modules' disclosed a bug submitted by b'mahmoud0x00' 
b'[Uppy] Internal Server side request forgery (bypass of #786956)'

28 Jun 2020

b'Visma Public' disclosed a bug submitted by b'bayesian_hacker' 
b'SXSS using unsanitized `customer no` in eaccountingprinting.stage.vismaonline.com'

28 Jun 2020

b'Node.js third-party modules' disclosed a bug submitted by b'ahihi' 
b'bunyan - RCE via insecure command formatting'

27 Jun 2020

b'GitHub Security Lab' disclosed a bug submitted by b'luchua' 
b'Java : CWE-548 - J2EE server directory listing enabled'

26 Jun 2020

b'Keybase' disclosed a bug submitted by b'op1um' 
b'Keybase client (Windows 10): Write files anywhere in userland using relative path in "download attachement" feature'

26 Jun 2020

b'8x8' disclosed a bug submitted by b'w2w' 
b'CRLF injection agentcrm.8x8.com'

26 Jun 2020

1 ... 323 324 325 326 327 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM