Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Stripo Inc' disclosed a bug submitted by b'renekroka' 
b'Stored XSS in template comments.'

31 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'homains' 
b'Open memory dump method leaking customer information ,secret keys , password , source code & admin accounts'

31 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'effectrenan' 
b'Command Injection vulnerability in kill-port-process package'

30 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'bluebridsec' 
b'stripo blog search SQL Injection'

30 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'hackthetime' 
b'subdomain takeover at status-stage0.stripo.email'

30 Jan 2020

b'WordPress' disclosed a bug submitted by b'ajxchapman' 
b'Wordpress unzip_file path traversal'

29 Jan 2020

b'Yelp' disclosed a bug submitted by b'bellpwn' 
b'Multiple Vulnerabilities in (*.blog.yelp.com) - Leakage user admin Sensitive Exposure'

29 Jan 2020

b'Starbucks' disclosed a bug submitted by b'zude' 
b"Account take over of 'light' starbuckscardb2b users"

29 Jan 2020

b'Starbucks' disclosed a bug submitted by b'laszaro' 
b'WAF bypass via double encoded non standard ASCII chars permitted a reflected XSS on response page not found pages - (629745 bypass)'

29 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'johnssimon007' 
b'[deliver-or-else] Path Traversal'

29 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'johnssimon007' 
b'[md-fileserver] Path Traversal'

29 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'johnssimon007' 
b'[file-browser] Inadequate Output Encoding and Escaping '

29 Jan 2020

b'Mail.ru' disclosed a bug submitted by b'orlserg' 
b'Account takeover via CORS misconfigutation on https://beta.delivery-club.ru'

29 Jan 2020

b'Mail.ru' disclosed a bug submitted by b'johndoe1492' 
b'SSRF in clients.city-mobil.ru'

29 Jan 2020

b'Mail.ru' disclosed a bug submitted by b'kiriknik' 
b'Blind SQL Injection in city-mobil.ru domain'

29 Jan 2020

b'Starbucks' disclosed a bug submitted by b'neweq' 
b'China - ecjobsdc.starbucks.com.cn html/shtml file upload vulnerability'

29 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'princechaddha' 
b'Denial Of Service in Strapi Framework using argument injection'

28 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'checkm50' 
b'Information disclosure through Server side resource forgery'

28 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'aaron_costello' 
b'Prototype pollution in dot-prop'

28 Jan 2020

b'New Relic' disclosed a bug submitted by b'masterhackor' 
b'Host Header Injection'

27 Jan 2020

1 ... 337 338 339 340 341 ... 740

BY DENIS WERNER - @NOBBD - IMPRESSUM