Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Roblox' disclosed a bug submitted by b'jackb898' 
b'Subdomain Takeover at creatorforum.roblox.com'

24 Mar 2020

b'Roblox' disclosed a bug submitted by b'jackb898' 
b'Reflected XSS through multiple inputs in the issue collector on Jira'

24 Mar 2020

b'Qulture.Rocks' disclosed a bug submitted by b'julfikar' 
b'Server Name disclosure'

24 Mar 2020

b'NordVPN' disclosed a bug submitted by b'keshavkejriwal' 
b'Account deletion requests not entirely honoured. Misinformation even after seeking clarification from customer support.'

24 Mar 2020

b'GitHub Security Lab' disclosed a bug submitted by b'crownpeanut' 
b'Dynamic reflection class'

24 Mar 2020

b'GitHub Security Lab' disclosed a bug submitted by b'grzegol' 
b'CodeQL query for finding ReDoS and Regex Injection vulnerabilities in Java'

24 Mar 2020

b'GitHub Security Lab' disclosed a bug submitted by b'crownpeanut' 
b'XPath Injection query in java'

24 Mar 2020

b'GitHub Security Lab' disclosed a bug submitted by b'crownpeanut' 
b'CWE-094 ScriptEngine in java'

24 Mar 2020

b'Stripo Inc' disclosed a bug submitted by b'dotsecurity' 
b'Blind SSRF while Creating Templates'

24 Mar 2020

b'Stripo Inc' disclosed a bug submitted by b'vijith0x0x' 
b'SSRF leads to internal port scan'

24 Mar 2020

b'Stripo Inc' disclosed a bug submitted by b'vijith0x0x' 
b'Email verification bypasa'

24 Mar 2020

b'Fortmatic Inc.' disclosed a bug submitted by b'pwny_sec' 
b'HTTP SMUGGLING EXPOSED HMAC/DOS '

24 Mar 2020

b'Every.org' disclosed a bug submitted by b'ahmd_halabi' 
b'Flaw in Change Email https://youtu.be/MMvlcHIGs2A'

24 Mar 2020

b'Qulture.Rocks' disclosed a bug submitted by b'ravi2443' 
b'Unrestricted File Upload in Chat Window'

23 Mar 2020

b'NordVPN' disclosed a bug submitted by b'khizer47' 
b'Expired Available Domains in nordvpn.com website code'

23 Mar 2020

b'Every.org' disclosed a bug submitted by b'harshitshah4' 
b'Improper email address verifiation while saving Account Details'

23 Mar 2020

b'Valve' disclosed a bug submitted by b'xpaw' 
b'Hidden scheduled partner events are propagated to Steam clients in CMsgClientClanState'

20 Mar 2020

b'HackerOne' disclosed a bug submitted by b'yashrs' 
b'Race Condition leads to undeletable group member'

20 Mar 2020

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'Unauthenticated users can obtain information about Checklist objects with unclaimed ChecklistCheck objects'

20 Mar 2020

b'PicsArt' disclosed a bug submitted by b'donhasan' 
b'User account compromised authentication bypass via oauth token impersonation'

20 Mar 2020

1 ... 329 330 331 332 333 ... 748

BY DENIS WERNER - @NOBBD - IMPRESSUM