The unofficial HackerOne disclosure Timeline

b'Starbucks' disclosed a bug submitted by b'neweq'
b'Default credentials for the temporary POC site alipoc.stg.starbucks.com.cn permitted WAF bypass and RCE'

16 Jun 2020 timeline

b'Starbucks' disclosed a bug submitted by b'zlz'
b'Misuse of an authentication cookie combined with a path traversal on app.starbucks.com permitted access to restricted data'

16 Jun 2020 timeline

b'Starbucks' disclosed a bug submitted by b'bayotop'
b'Reflected DOM XSS on www.starbucks.co.uk'

16 Jun 2020 timeline

b'Starbucks' disclosed a bug submitted by b'bayotop'
b'Reflected XSS on https://www.starbucks.co.uk/shop/paymentmethod/ (bypass for 227486)'

16 Jun 2020 timeline

b'Helium' disclosed a bug submitted by b'error___404'
b'unpermitted user can change the device name of admin account'

16 Jun 2020 timeline

b'Ruby on Rails' disclosed a bug submitted by b'fletchto99'
b'Rack parses encoded cookie names allowing an attacker to send malicious `__Host-` and `__Secure-` prefixed cookies'

16 Jun 2020 timeline

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla'
b'[devcert] Command Injection via insecure command formatting'

15 Jun 2020 timeline

b'Rocket.Chat' disclosed a bug submitted by b'elfiman'
b'account takeover on 3.0.1 version'

14 Jun 2020 timeline

b'DuckDuckGo' disclosed a bug submitted by b'cujanovic'
b'DOM XSS on duckduckgo.com search'

14 Jun 2020 timeline

b'Nextcloud' disclosed a bug submitted by b'a9hora'
b'Cross site scripting - XSRF Token'

14 Jun 2020 timeline

b'Clario' disclosed a bug submitted by b'xpronator'
b'rxss at https://mackeeper.com page not found via rid parameter'

14 Jun 2020 timeline

b'Clario' disclosed a bug submitted by b'r3ggi-on-h1'
b'Local Privilege escalation to root via XPC'

14 Jun 2020 timeline

b'Clario' disclosed a bug submitted by b'jair'
b'Affiliates - Session Fixation'

14 Jun 2020 timeline

b'Clario' disclosed a bug submitted by b'sec0ndw0lf'
b'Open Redirect at https://store.mackeeper.com/767/cookie via redirectto parameter'

14 Jun 2020 timeline

b'Clario' disclosed a bug submitted by b'sec0ndw0lf'
b'RXSS on landings/land/3/ron_clean_17_app3_alerts/index.php (mackeeperapp3.mackeeper.com)'

13 Jun 2020 timeline

b'Clario' disclosed a bug submitted by b'sec0ndw0lf'
b'RXSS on unsubscribe feature (affiliates.kromtech.com)'

13 Jun 2020 timeline

b'Clario' disclosed a bug submitted by b'sec0ndw0lf'
b'Reflected XSS (mackeeperapp2.mackeeper.com)'

13 Jun 2020 timeline

b'Clario' disclosed a bug submitted by b'sec0ndw0lf'
b'RXSS on /landings/123.1/index.php (mackeeperapp.mackeeper.com)'

13 Jun 2020 timeline

b'Clario' disclosed a bug submitted by b'sec0ndw0lf'
b'RXSS on thankyou.pixels.php (yapi.mackeeper.com)'

13 Jun 2020 timeline

b'HackerOne' disclosed a bug submitted by b'iamr000t'
b"Attacker may be able to bounce enough emails which suspend HackerOne's SES service and cause a DoS of HackerOne's email service"

12 Jun 2020 timeline

1 ... 328 329 330 331 332 ... 771

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.