Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ruby on Rails' disclosed a bug submitted by b'mastahyeti' 
b'CSRF header is sent to external websites when using data-remote forms'

26 May 2020

b'Ruby on Rails' disclosed a bug submitted by b'dylan-ts' 
b'Untrusted strings that are cache fetched with raw option are automatically marshal loaded'

26 May 2020

b'Razer' disclosed a bug submitted by b's3cr3tsdn' 
b'SQL injection at https://sea-web.gold.razer.com/ajax-get-status.php via txid parameter'

26 May 2020

b'Razer' disclosed a bug submitted by b'f_m' 
b'HTML injection in support.razer.com [IE only]'

26 May 2020

b'Nutanix' disclosed a bug submitted by b'zinin' 
b'AWS S3 bucket writeable for authenticated AWS users'

26 May 2020

b'Stripo Inc' disclosed a bug submitted by b'what_web' 
b'[www.stripo.email] There is no rate limit for contact-us endpoints'

26 May 2020

b'NordVPN' disclosed a bug submitted by b'corryl' 
b'Incorrect control of the trial period'

26 May 2020

b'QIWI' disclosed a bug submitted by b'circuit' 
b'XSS https://agent.postamat.tech/ ? ??????? + ??????? ????????? ??????????'

25 May 2020

b'Clario' disclosed a bug submitted by b'kphaks' 
b'XSS in https://affiliates.kromtech.com'

25 May 2020

b'Clario' disclosed a bug submitted by b'kphaks' 
b'CRLF Injection - http://stage.mackeeper.com/'

25 May 2020

b'Clario' disclosed a bug submitted by b'kphaks' 
b'XSS in https://mackeeper.com'

25 May 2020

b'Clario' disclosed a bug submitted by b'kphaks' 
b'CRLF Injection - http://stage-static-cdn.mackeeper.com/'

25 May 2020

b'HackerOne' disclosed a bug submitted by b'iamr000t' 
b'Attacker with an Old account might still be able to DoS ctf.hacker101.com by sending a Crafted request '

25 May 2020

b'Infogram' disclosed a bug submitted by b'7001' 
b'Bypass for blind SSRF #281950 and #287496'

24 May 2020

b'Clario' disclosed a bug submitted by b'inf0seq' 
b'Lack of HTTPS in service communications'

23 May 2020

b'Clario' disclosed a bug submitted by b'inf0seq' 
b'Reflected XSS'

23 May 2020

b'Clario' disclosed a bug submitted by b'inf0seq' 
b'Unauthenticated Reflected Cross-Site Scripting on https://account.mackeeper.com/signin page'

23 May 2020

b'Nextcloud' disclosed a bug submitted by b'skewbed' 
b'XSS in PDF Viewer'

23 May 2020

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Disclosure of the name of a program that has a private part with an external link'

22 May 2020

b'Glassdoor' disclosed a bug submitted by b'parzel' 
b'Reflected XSS on https://www.glassdoor.com/employers/sem-dual-lp/'

22 May 2020

1 ... 329 330 331 332 333 ... 766

BY DENIS WERNER - @NOBBD - IMPRESSUM