Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'hitman_47' 
b'IDOR allows me to mark devices of another user for remote wipe out'

19 Apr 2020

b'Palo Alto Software' disclosed a bug submitted by b'seqrity' 
b'Stored XSS on upload files leads to steal cookie'

18 Apr 2020

b'GitLab' disclosed a bug submitted by b'mclaren650sspider' 
b'Server Side Request Forgery mitigation bypass'

18 Apr 2020

b'GitHub Security Lab' disclosed a bug submitted by b'ulldma' 
b'Java/CWE-036: Calling openStream on URLs created from remote source can lead to file disclosure'

17 Apr 2020

b'GitHub Security Lab' disclosed a bug submitted by b'theopolis' 
b'CPP: Out of order Linux permission dropping without checking return codes'

17 Apr 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'Go/CWE-643: XPath Injection Query in Go'

17 Apr 2020

b'GitHub Security Lab' disclosed a bug submitted by b'someonenobbd' 
b'CPP: Out of order Linux permission dropping without checking return codes'

17 Apr 2020

b'Automattic' disclosed a bug submitted by b'nathand' 
b'Denial of service to WP-JSON API by cache poisoning the CORS allow origin header'

16 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'r0hack' 
b'HTML injection at face.city-mobil.ru'

16 Apr 2020

b'Mapbox' disclosed a bug submitted by b'h4ck3d' 
b'Reflected XSS via XML Namespace URI on https://go.mapbox.com/index.php/soap/'

15 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[fleet.city-mobil.ru] Driver balance increasing'

15 Apr 2020

b'BCM Messenger' disclosed a bug submitted by b'c37m' 
b'API - Amazon S3 bucket misconfiguration'

14 Apr 2020

b'Coda' disclosed a bug submitted by b'0xcrypto' 
b'Unrestricted access to any "connected pack" on docs'

14 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'r0hack' 
b'Leak Sensetive Data at face.city-mobil.ru'

14 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'byq' 
b'SSRF & LFR via on city-mobil.ru'

14 Apr 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'losthacker' 
b'Blind SSRF at https://chat.makerdao.com/account/profile'

14 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'byq' 
b'SSRF on fleet.city-mobil.ru leads to local file read'

14 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'byq' 
b'SSRF & LFR on city-mobil.ru'

14 Apr 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'0xpegg' 
b'[blog.makerdao.com] Multiple Vulnerabilities - Leads to leakage user admin sensitive exposure'

14 Apr 2020

b'Mail.ru' disclosed a bug submitted by b'act1on3' 
b'[https://city-mobil.ru/taxiserv] Blind XSS into username'

14 Apr 2020

1 ... 344 345 346 347 348 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM