Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'DOM BASED XSS ON https://www.rockstargames.com/GTAOnline/features '

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'insecure redirect in https://www.rockstargames.com'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'DOM Based xss on https://www.rockstargames.com/ ( 1 )'

12 Jun 2020

b'Shopify' disclosed a bug submitted by b'flashdisk' 
b'Stored XSS on demo app link '

12 Jun 2020

b'Shopify' disclosed a bug submitted by b'flashdisk' 
b'User with removed manage shops permissions is still able to make changes to a shop '

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'CSRF Vulnerability on https://signin.rockstargames.com/tpa/facebook/link/'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Image Injection on www.rockstargames.com/screenshot-viewer/responsive/image may allow facebook oauth token theft.'

12 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Information Disclosure in https://www.rockstargames.com/search'

11 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Warehouse dom based xss may lead to Social Club Account Taker Over.'

11 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Open redirect in https://www.rockstargames.com/GTAOnline/restricted-content/agegate/form may lead to Facebook OAuth token theft'

11 Jun 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'CodeQL query for SpEL injections'

11 Jun 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'Java: CWE-297 Insecure JavaMail SSL configuration'

11 Jun 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi' 
b'CSRF - Close Account'

11 Jun 2020

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'DOM XSS on https://www.rockstargames.com/GTAOnline/feedback'

11 Jun 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'dhakal_ananda' 
b'Account takeover through CSRF in http://???????/??????????/default.asp'

11 Jun 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pvm' 
b'SSN is exposed on slides, previous critical report was not fixed in an appropriate way'

11 Jun 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi' 
b'CSRF - Modify Company Info'

11 Jun 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'pvm' 
b'Tomcat examples available for public, Disclosure Apache Tomcat version, Critical/High/Medium CVE'

11 Jun 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'natanalves01001' 
b'Reflected XSS and HTML Injectionon a DoD website'

11 Jun 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'un4gi' 
b'Unrestricted File Upload to ???????SubmitRequest/Index.cfm?fwa=wizardform'

11 Jun 2020

1 ... 334 335 336 337 338 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM