Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'linkks' 
b' Out-of-date Version (Apache) '

02 Dec 2019

b'Mail.ru' disclosed a bug submitted by b'ruvlol' 
b'RCE on shared.mail.ru due to "widget" plugin'

02 Dec 2019

b'Mail.ru' disclosed a bug submitted by b'r0hack' 
b'Account Takeover at vseapteki.ru'

02 Dec 2019

b'Rockstar Games' disclosed a bug submitted by b'adr' 
b'Unquoted Service Path in "Rockstar Game Library Service"'

02 Dec 2019

b'ok.ru' disclosed a bug submitted by b'circuit' 
b'???????? XSS ? ?????? ?????????? ????? ?????'

02 Dec 2019

b'HackerOne' disclosed a bug submitted by b'msdian7' 
b'Disclosure of `payment_transactions` for programs via GraphQL query'

01 Dec 2019

b'Vanilla' disclosed a bug submitted by b'ronr' 
b'Web cache deception attack on https://open.vanillaforums.com/messages/all'

01 Dec 2019

b'Automattic' disclosed a bug submitted by b'hodkasia_sachin' 
b'[IDOR] Attacker user can Approve/Decline AFK on the behalf of other users'

01 Dec 2019

b'Genasys Technologies' disclosed a bug submitted by b'roottusk' 
b'Login Bypass to OTP Enumeration'

28 Nov 2019

b'Lob' disclosed a bug submitted by b'painreigns' 
b'HTTP Request Smuggling on vpn.lob.com'

27 Nov 2019

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Project Template functionality can be used to copy private project data, such as repository, confidential issues, snippets, and merge requests'

27 Nov 2019

b'WakaTime' disclosed a bug submitted by b'rashedhasan007' 
b'previous token can be reused for verifying same email address '

27 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'leonklingele' 
b'Nextcloud domain and name of every user leaked to lookup server'

26 Nov 2019

b'QIWI' disclosed a bug submitted by b'pisarenko' 
b'????????? ?????????????? ?????????? composer.lock docker-compose.yml '

26 Nov 2019

b'Mail.ru' disclosed a bug submitted by b'pss_xss' 
b'Reflected XSS on https://go.mail.ru/search?fr=mn&q=<payload>'

25 Nov 2019

b'Mail.ru' disclosed a bug submitted by b'almaco' 
b'XSS via message subject - mobile application'

25 Nov 2019

b'Kaspersky' disclosed a bug submitted by b'palant' 
b'Chrome extension: Websites can uninstall browser extensions'

25 Nov 2019

b'Kaspersky' disclosed a bug submitted by b'palant' 
b'Override links for certificate warnings and similar UI are predictable'

25 Nov 2019

b'Kaspersky' disclosed a bug submitted by b'palant' 
b"Kaspersky Password Manager allows websites to access user's address data"

24 Nov 2019

b'Kaspersky' disclosed a bug submitted by b'palant' 
b"[Firefox and Chrome browser integration] Websites can hijack Kaspersky's command interface"

24 Nov 2019

1 ... 340 341 342 343 344 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM