Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arkaic' 
b'Followup - SQL Injection - https://??????????/??????/MSI.portal'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arkaic' 
b'SQL Injection - https://???/?????????/MSI.portal'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ahmd_halabi' 
b'Internal IP Address Disclosed'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cablej_dds' 
b'[https://???] Local File Inclusion via graph.php'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nrockhouse' 
b'Firewall rules for ???????? can be bypassed to leak site authors'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'jarvis7' 
b'[??????????] Unauthorized access to admin panel'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ok_bye_now' 
b'File Upload Restriction Bypass'

14 May 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'l00ph0le' 
b'SQL Injection in Login Page: https://?????/?????????/login.php'

14 May 2020

b'Mail.ru' disclosed a bug submitted by b'merron' 
b'Mirror of https://city-mobil.ru admin interface'

14 May 2020

b'Mail.ru' disclosed a bug submitted by b'johndoe1492' 
b'Possible tokens leak on ws-app.city-mobil.ru'

14 May 2020

b'Palo Alto Software' disclosed a bug submitted by b'macasun' 
b'IDOR on update user preferences'

13 May 2020

b'Ruby on Rails' disclosed a bug submitted by b'speleding' 
b'Prevent XSS when passing a parameter directly into link_to '

13 May 2020

b'Ruby on Rails' disclosed a bug submitted by b'jobert' 
b'Missing resource identifier encoding may lead to security vulnerabilities'

13 May 2020

b'RGhost' disclosed a bug submitted by b'tandav' 
b'Idor on the DELETE /comments/'

13 May 2020

b'TTS Bug Bounty' disclosed a bug submitted by b'puppykok' 
b'HTTP Request Smuggling on https://labs.data.gov'

13 May 2020

b'Mail.ru' disclosed a bug submitted by b'anyday' 
b'[capsula.mail.ru] overriding order info'

13 May 2020

b'Mail.ru' disclosed a bug submitted by b'iframe' 
b'Unsafe downloaded file execution'

13 May 2020

b'Razer' disclosed a bug submitted by b'mshassy' 
b'Helpdesk takeover (subdomain takeover) in razerzone.com domain via unclaimed Zendesk instance'

12 May 2020

b'Razer' disclosed a bug submitted by b'angeltsvetkov' 
b'Blind SQL Injection(Time Based Payload) in https://www.easytopup.in.th/store/game/digimon-master via CheckuserForm[user_id]'

12 May 2020

b'Razer' disclosed a bug submitted by b'sudi' 
b'Post Based Reflected XSS on [https://investor.razer.com/s/ir_contact.php]'

12 May 2020

1 ... 343 344 345 346 347 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM