Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Ruby on Rails' disclosed a bug submitted by b'fletchto99' 
b'Rack parses encoded cookie names allowing an attacker to send malicious `__Host-` and `__Secure-` prefixed cookies'

16 Jun 2020

b'Node.js third-party modules' disclosed a bug submitted by b'd3lla' 
b'[devcert] Command Injection via insecure command formatting'

15 Jun 2020

b'Rocket.Chat' disclosed a bug submitted by b'elfiman' 
b'account takeover on 3.0.1 version'

14 Jun 2020

b'DuckDuckGo' disclosed a bug submitted by b'cujanovic' 
b'DOM XSS on duckduckgo.com search'

14 Jun 2020

b'Nextcloud' disclosed a bug submitted by b'a9hora' 
b'Cross site scripting - XSRF Token'

14 Jun 2020

b'Clario' disclosed a bug submitted by b'xpronator' 
b'rxss at https://mackeeper.com page not found via rid parameter'

14 Jun 2020

b'Clario' disclosed a bug submitted by b'r3ggi-on-h1' 
b'Local Privilege escalation to root via XPC'

14 Jun 2020

b'Clario' disclosed a bug submitted by b'jair' 
b'Affiliates - Session Fixation'

14 Jun 2020

b'Clario' disclosed a bug submitted by b'sec0ndw0lf' 
b'Open Redirect at https://store.mackeeper.com/767/cookie via redirectto parameter'

14 Jun 2020

b'Clario' disclosed a bug submitted by b'sec0ndw0lf' 
b'RXSS on landings/land/3/ron_clean_17_app3_alerts/index.php (mackeeperapp3.mackeeper.com)'

13 Jun 2020

b'Clario' disclosed a bug submitted by b'sec0ndw0lf' 
b'RXSS on unsubscribe feature (affiliates.kromtech.com)'

13 Jun 2020

b'Clario' disclosed a bug submitted by b'sec0ndw0lf' 
b'Reflected XSS (mackeeperapp2.mackeeper.com)'

13 Jun 2020

b'Clario' disclosed a bug submitted by b'sec0ndw0lf' 
b'RXSS on /landings/123.1/index.php (mackeeperapp.mackeeper.com)'

13 Jun 2020

b'Clario' disclosed a bug submitted by b'sec0ndw0lf' 
b'RXSS on thankyou.pixels.php (yapi.mackeeper.com)'

13 Jun 2020

b'HackerOne' disclosed a bug submitted by b'iamr000t' 
b"Attacker may be able to bounce enough emails which suspend HackerOne's SES service and cause a DoS of HackerOne's email service"

12 Jun 2020

b'HackerOne' disclosed a bug submitted by b'what_web' 
b'Login CSRF vulnerability on hackerone.com'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Race condition vulnerability on "This Rocks" button.'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Dom based xss on https://www.rockstargames.com/ via `returnUrl` parameter'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'xss on https://www.rockstargames.com/GTAOnline/jp/screens/ '

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Open redirect affecting m.rockstargames.com/'

12 Jun 2020

1 ... 333 334 335 336 337 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM