REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Clario'
disclosed a bug submitted by
b'kphaks'
b'XSS in https://mackeeper.com'
25 May 2020
b'Clario'
disclosed a bug submitted by
b'kphaks'
b'CRLF Injection - http://stage-static-cdn.mackeeper.com/'
25 May 2020
b'HackerOne'
disclosed a bug submitted by
b'iamr000t'
b'Attacker with an Old account might still be able to DoS ctf.hacker101.com by sending a Crafted request '
25 May 2020
b'Infogram'
disclosed a bug submitted by
b'7001'
b'Bypass for blind SSRF #281950 and #287496'
24 May 2020
b'Clario'
disclosed a bug submitted by
b'inf0seq'
b'Lack of HTTPS in service communications'
23 May 2020
b'Clario'
disclosed a bug submitted by
b'inf0seq'
b'Reflected XSS'
23 May 2020
b'Clario'
disclosed a bug submitted by
b'inf0seq'
b'Unauthenticated Reflected Cross-Site Scripting on https://account.mackeeper.com/signin page'
23 May 2020
b'Nextcloud'
disclosed a bug submitted by
b'skewbed'
b'XSS in PDF Viewer'
23 May 2020
b'HackerOne'
disclosed a bug submitted by
b'haxta4ok00'
b'Disclosure of the name of a program that has a private part with an external link'
22 May 2020
b'Glassdoor'
disclosed a bug submitted by
b'parzel'
b'Reflected XSS on https://www.glassdoor.com/employers/sem-dual-lp/'
22 May 2020
b'NordVPN'
disclosed a bug submitted by
b'r3ggi-on-h1'
b'Vulnerabilities chain leading to privilege escalation'
22 May 2020
b'DigitalOcean'
disclosed a bug submitted by
b'adiosmf'
b'Unauthorized access to https://shipit.analogpond.com/'
22 May 2020
b'NordVPN'
disclosed a bug submitted by
b'martinbydefault'
b'User data not anonymized is sent to analytics server'
22 May 2020
b'WordPress'
disclosed a bug submitted by
b'hoangkien1020'
b"Improper Access Control in Buddypress core allows reply,delete any user's activity"
22 May 2020
b'WordPress'
disclosed a bug submitted by
b'hoangkien1020'
b'Allow authenticated users can edit, trash,and add new in BuddyPress Emails function'
22 May 2020
b'WordPress'
disclosed a bug submitted by
b'hoangkien1020'
b'CSRF in Profile Fields allows deleting any field in BuddyPress'
22 May 2020
b'WordPress'
disclosed a bug submitted by
b'hoangkien1020'
b'Privilege Escalation in BuddyPress core allows Moderate to Administrator '
22 May 2020
b'Alibaba BBP'
disclosed a bug submitted by
b'testert1ng'
b'SSRF / Arbitrary File Read on Alibaba Cloud Academy'
21 May 2020
b'Node.js third-party modules'
disclosed a bug submitted by
b'mayaseven'
b'Pixel flood attack cause the javascript heap out of memory'
21 May 2020
b'Top Echelon Software'
disclosed a bug submitted by
b'darkshadow1733'
b'able to login into login.topechelon.com'
20 May 2020
1
...
334
335
336
337
338
...
771
BY DENIS WERNER - @NOBBD -
IMPRESSUM