Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitLab' disclosed a bug submitted by b'ryhmnlfj' 
b'Uncontrolled Resource Consumption in any Markdown field using Mermaid'

20 Dec 2019

b'YouPorn' disclosed a bug submitted by b'n00bsec' 
b'XSS reflected on [https://www.youporn.com]'

19 Dec 2019

b'Automattic' disclosed a bug submitted by b'simonscannell' 
b'Authenticated Code Execution through Phar deserialization in CSV Importer as Shop manager in WooCommerce'

19 Dec 2019

b'Automattic' disclosed a bug submitted by b'simonscannell' 
b"WooCommerce Blacklist in 'map_meta_cap' leads to Privilege Escalation of Shopmanagers"

19 Dec 2019

b'Automattic' disclosed a bug submitted by b'simonscannell' 
b"Stored XSS in Jetpack's Simple Payment Module by Contributors / Authors"

19 Dec 2019

b'Automattic' disclosed a bug submitted by b'simonscannell' 
b'Arbitrary File Download as Shopmanager'

19 Dec 2019

b'Stripo Inc' disclosed a bug submitted by b'aishkendle' 
b'Password token leak via Host header'

19 Dec 2019

b'Stripo Inc' disclosed a bug submitted by b'aishkendle' 
b'OLD SESSION DOES NOT EXPIRE AFTER PASSWORD CHANGE'

19 Dec 2019

b'Stripo Inc' disclosed a bug submitted by b'aishkendle' 
b'Bypass email verification and create email template with the editor'

19 Dec 2019

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'Git flag injection - local file overwrite to remote code execution'

19 Dec 2019

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'Git flag injection leading to file overwrite and potential remote code execution'

19 Dec 2019

b'Mail.ru' disclosed a bug submitted by b'krupnikas' 
b'Public available Sensitive Information about drivers'

18 Dec 2019

b'Polymail, Inc.' disclosed a bug submitted by b'renekroka' 
b'Reflected XSS by changing url parameters on the user invite onboarding links.'

18 Dec 2019

b'QIWI' disclosed a bug submitted by b'circuit' 
b'hard-use account takeover qiwi.com'

18 Dec 2019

b'Stripo Inc' disclosed a bug submitted by b'pirate_' 
b'Redirection through referer tag'

18 Dec 2019

b'Stripo Inc' disclosed a bug submitted by b'rutik346' 
b'Able to change password by entering wrong old password'

18 Dec 2019

b'Stripo Inc' disclosed a bug submitted by b'eliel' 
b'SSRF in /cabinet/stripeapi/v1/siteInfoLookup?url=XXX'

18 Dec 2019

b'Chaturbate' disclosed a bug submitted by b'zhutyra' 
b'Camo Image Proxy Bypass with CSS Escape Sequences'

18 Dec 2019

b'Twitter' disclosed a bug submitted by b'startbug' 
b'Stored XSS in https://app.mopub.com'

17 Dec 2019

b'Mail.ru' disclosed a bug submitted by b'agametov' 
b'Cross-site Scripting (XSS) - Reflected vseapteki.ru'

17 Dec 2019

1 ... 341 342 343 344 345 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM