Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Starbucks' disclosed a bug submitted by b'neweq' 
b'China - ecjobsdc.starbucks.com.cn html/shtml file upload vulnerability'

29 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'princechaddha' 
b'Denial Of Service in Strapi Framework using argument injection'

28 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'checkm50' 
b'Information disclosure through Server side resource forgery'

28 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'aaron_costello' 
b'Prototype pollution in dot-prop'

28 Jan 2020

b'New Relic' disclosed a bug submitted by b'masterhackor' 
b'Host Header Injection'

27 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'ronperris' 
b'[url-parse] Improper Validation and Sanitization'

27 Jan 2020

b'Reverb.com' disclosed a bug submitted by b'muon4' 
b'Race Condition allows to redeem multiple times gift cards which leads to free "money"'

25 Jan 2020

b'RATELIMITED' disclosed a bug submitted by b'amarbalosh' 
b'xss in /users/[id]/set_tier endpoint'

25 Jan 2020

b'Flickr' disclosed a bug submitted by b'asad0x01_' 
b'Arbitrary file read via ffmpeg HLS parser at https://www.flickr.com/photos/upload'

25 Jan 2020

b'Keybase' disclosed a bug submitted by b'u3mur4' 
b'macOS privilege escalation'

24 Jan 2020

b'Keybase' disclosed a bug submitted by b'u3mur4' 
b'From nobody to somebody'

24 Jan 2020

b'Twitter' disclosed a bug submitted by b'zlz' 
b'Creating malformed URLs via new line character in-between two URLs leads to misrepresented hyperlinks in Tweets/DMs'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'logan5' 
b'CSRF combined with IDOR within Document Converter exposes files'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS/CSRF] filter content-type bypass in Files'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS/CSRF] filter content-type bypass in Files v2.0'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'pnig0s' 
b'Arbitrary local system file read on open-xchange server '

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] Mail <style> v2.0'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] Style/Event Filter Bypass v3.0'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'rceman' 
b'Stored-XSS with user interaction on [sandbox.open-xchange.com] via inserted link in mail'

24 Jan 2020

b'Open-Xchange' disclosed a bug submitted by b'secator' 
b'[XSS] Pasting bootstrap in mail compose'

24 Jan 2020

1 ... 327 328 329 330 331 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM