Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Race condition vulnerability on "This Rocks" button.'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Dom based xss on https://www.rockstargames.com/ via `returnUrl` parameter'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'xss on https://www.rockstargames.com/GTAOnline/jp/screens/ '

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Open redirect affecting m.rockstargames.com/'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'DOM BASED XSS ON https://www.rockstargames.com/GTAOnline/features '

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'insecure redirect in https://www.rockstargames.com'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'DOM Based xss on https://www.rockstargames.com/ ( 1 )'

12 Jun 2020

b'Shopify' disclosed a bug submitted by b'flashdisk' 
b'Stored XSS on demo app link '

12 Jun 2020

b'Shopify' disclosed a bug submitted by b'flashdisk' 
b'User with removed manage shops permissions is still able to make changes to a shop '

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'CSRF Vulnerability on https://signin.rockstargames.com/tpa/facebook/link/'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Image Injection on www.rockstargames.com/screenshot-viewer/responsive/image may allow facebook oauth token theft.'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Information Disclosure in https://www.rockstargames.com/search'

11 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Warehouse dom based xss may lead to Social Club Account Taker Over.'

11 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Open redirect in https://www.rockstargames.com/GTAOnline/restricted-content/agegate/form may lead to Facebook OAuth token theft'

11 Jun 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'CodeQL query for SpEL injections'

11 Jun 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'Java: CWE-297 Insecure JavaMail SSL configuration'

11 Jun 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi' 
b'CSRF - Close Account'

11 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'DOM XSS on https://www.rockstargames.com/GTAOnline/feedback'

11 Jun 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'dhakal_ananda' 
b'Account takeover through CSRF in http://???????/??????????/default.asp'

11 Jun 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pvm' 
b'SSN is exposed on slides, previous critical report was not fixed in an appropriate way'

11 Jun 2020

1 ... 328 329 330 331 332 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM