Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'orlserg' 
b'Race condition ?? ??????? ?????? ?? ?????'

18 Feb 2020

b'Mail.ru' disclosed a bug submitted by b'bounty-' 
b'Open Redirect'

18 Feb 2020

b'Mail.ru' disclosed a bug submitted by b'renekroka' 
b'Reflected XSS with WAF Bypass https://pw.mail.ru'

18 Feb 2020

b'Automattic' disclosed a bug submitted by b'adhamsadaqah' 
b'Stored XSS in wordpress.com'

17 Feb 2020

b'NordVPN' disclosed a bug submitted by b'zerody' 
b'Potential leak of server side software at repogohi.nordvpn.com'

16 Feb 2020

b'SEMrush' disclosed a bug submitted by b'a_d_a_m' 
b'CORS misconfiguration which leads to the disclosure of certain data concerning the user.'

15 Feb 2020

b'Node.js third-party modules' disclosed a bug submitted by b'rhyselsmore' 
b'Filesystem Writes via `yarn install` via symlinks and tar transforms inside a crafted malicious package'

15 Feb 2020

b'Mail.ru' disclosed a bug submitted by b'rainbow_json' 
b"[API] ICQ user's avatar can be manipulated remotely"

14 Feb 2020

b'Mail.ru' disclosed a bug submitted by b'rainbow_json' 
b'[Web ICQ Client] XSS ?????????? ? ????? ????????????'

14 Feb 2020

b'Mail.ru' disclosed a bug submitted by b'rainbow_json' 
b'[Web ICQ Client] XSS-inj in polls'

14 Feb 2020

b'Mail.ru' disclosed a bug submitted by b'rainbow_json' 
b'IP address can be leaked on Image preview in ICQ for Android chat'

14 Feb 2020

b'Maximum' disclosed a bug submitted by b'rhetoric' 
b"'X-Forwarded-Host' key used in input without sanitation - possible cache poisoning"

14 Feb 2020

b'Slack' disclosed a bug submitted by b'akaki' 
b'URL filter bypass in Enterprise Grid'

14 Feb 2020

b'Node.js' disclosed a bug submitted by b'mpracucci' 
b'Fix for CVE-2018-12122 can be bypassed via keep-alive requests'

13 Feb 2020

b'Node.js' disclosed a bug submitted by b'jzebor' 
b'Pull Request #12949 - Security Implications without CVE assignment'

13 Feb 2020

b'Node.js' disclosed a bug submitted by b'jzebor' 
b'Out of order TLS handshake / application data messages lead to segmentation fault'

13 Feb 2020

b'Node.js' disclosed a bug submitted by b'jasnell' 
b'Denial of Service: nghttp2 use of uninitialized pointer'

13 Feb 2020

b'Node.js' disclosed a bug submitted by b'jzebor' 
b'HTTP/2 Denial of Service Vulnerability'

13 Feb 2020

b'Node.js' disclosed a bug submitted by b'htuch' 
b'Vulnerability in http-parser & embedded NULL header handling'

13 Feb 2020

b'NordVPN' disclosed a bug submitted by b'd4nt' 
b'Clickjacking at join.nordvpn.com'

13 Feb 2020

1 ... 324 325 326 327 328 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM