Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Multiple buffer over reads in mbox_from_parse'

03 Apr 2020

b'Liberapay' disclosed a bug submitted by b'harrisoft' 
b'Leaking Of Sensitive Information on Github'

03 Apr 2020

b'MTN Group' disclosed a bug submitted by b'miguel_santareno' 
b'Information Disclosure Microsoft IIS Server service.cnf in a mtn website'

03 Apr 2020

b'MTN Group' disclosed a bug submitted by b'miguel_santareno' 
b'Information Disclosure FrontPage Configuration Information /_vti_inf.html in https://www.mtn.co.za/'

03 Apr 2020

b'NordVPN' disclosed a bug submitted by b'bihari_web' 
b'Denial of Service with Cookie Bomb'

03 Apr 2020

b'NordVPN' disclosed a bug submitted by b'eliterevenger' 
b'Arbitrary Set-Cookie via "?coupon=" due to semi-colon not encoded'

03 Apr 2020

b'Shopify' disclosed a bug submitted by b'davscol94' 
b'xss stored'

03 Apr 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'th3cyb3rc0p' 
b'load scripts DOS vulnerability'

02 Apr 2020

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Buffer overread in parse_angle_addr called from message_address_parse_path '

02 Apr 2020

b'SEMrush' disclosed a bug submitted by b'ziko_amazigh' 
b'Reflected XSS on https://www.semrush.com/my_reports/externalSource/callback/googleAccountsGMB'

02 Apr 2020

b'Vanilla' disclosed a bug submitted by b'vivek111' 
b' XSS through chat messages'

02 Apr 2020

b'SEMrush' disclosed a bug submitted by b'a_d_a_m' 
b'IDOR in marketing calendar tool'

02 Apr 2020

b'SEMrush' disclosed a bug submitted by b'yashrs' 
b'An attacker can buy marketplace articles for lower prices as it allows for negative quantity values leading to business loss'

02 Apr 2020

b'SEMrush' disclosed a bug submitted by b'nikitastupin' 
b'Content Injection on api.semrush.com to Reflected XSS'

02 Apr 2020

b'Node.js third-party modules' disclosed a bug submitted by b'sontungatm' 
b'[utils-extend] Prototype pollution '

02 Apr 2020

b'Slack' disclosed a bug submitted by b'jhancock' 
b'Relative Path Vulnerability Results in Arbitrary Command Execution/Privilege Escalation'

01 Apr 2020

b'Razer' disclosed a bug submitted by b'sambal0x' 
b'[Razer Pay] Broken Access Control at /v1/verifyPhone/ allows enumeration of usernames and ID information'

01 Apr 2020

b'Razer' disclosed a bug submitted by b'p3rr0' 
b'Access to support tickets and payment history, impersonate razer support staff'

01 Apr 2020

b'Shopify' disclosed a bug submitted by b'ngalog' 
b'[Part II] Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege Escalation'

01 Apr 2020

b'Shopify' disclosed a bug submitted by b'ngalog' 
b'Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege Escalation to Any Shop Owner by Taking Advantage of the Shopify SSO'

01 Apr 2020

1 ... 332 333 334 335 336 ... 755

BY DENIS WERNER - @NOBBD - IMPRESSUM