Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'8x8' disclosed a bug submitted by b'0x496' 
b'Reflected xss on 8x8.vc'

15 Jan 2020

b'DataStax' disclosed a bug submitted by b'priyanshuxo' 
b'Helpdesk Takeover at dmc.datastax.com'

15 Jan 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'ardi4x' 
b'Wordpress users disclosure on blog.makerdao.con'

15 Jan 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'0xbugger' 
b'UNRESTRICTED FILE UPLOAD AT chat.makerdao.com'

15 Jan 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'offensive-security' 
b'Two-factor authentication (2FA) Bypass'

15 Jan 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'm7mdharoun' 
b'App Takeover ( makerdao.herokuapp.com )'

15 Jan 2020

b'Node.js' disclosed a bug submitted by b'bayotop' 
b'url.parse() hostname spoofing via javascript: URIs'

15 Jan 2020

b'curl' disclosed a bug submitted by b'vshmuk' 
b'Port and service scanning on localhost due to improper URL validation.'

15 Jan 2020

b'Node.js' disclosed a bug submitted by b'tunz' 
b'Use After Free in crypto.randomFill'

15 Jan 2020

b'Node.js' disclosed a bug submitted by b'arkadiyt' 
b'Http request splitting'

15 Jan 2020

b'Automattic' disclosed a bug submitted by b'godofdarkness_msf' 
b'Theme Assets uploader allows HTML content'

14 Jan 2020

b'Automattic' disclosed a bug submitted by b'godofdarkness_msf' 
b'Follow by email allows for following by unverified emails'

14 Jan 2020

b'Mail.ru' disclosed a bug submitted by b'mickey01' 
b'Information disclosure with sensitive data'

14 Jan 2020

b'Mail.ru' disclosed a bug submitted by b'mobius07' 
b'API method at api.my.games allows to enumerate user emails'

14 Jan 2020

b'DRIVE.NET, Inc.' disclosed a bug submitted by b'dre4dp1r4terob3rts' 
b'Same site Scripting '

13 Jan 2020

b'Razer' disclosed a bug submitted by b'namunah' 
b'Misconfigured s3 Bucket exposure'

12 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'vineetpandey' 
b'[node-red] Stored XSS within Flow\'s - "Name" field '

11 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'mik317' 
b'[npm-git-publish] RCE via insecure command formatting'

11 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'ayerobot' 
b'Stored XSS (Hexo-admin plugin)'

11 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'mik317' 
b'[meta-git] RCE via insecure command formatting'

11 Jan 2020

1 ... 345 346 347 348 349 ... 745

BY DENIS WERNER - @NOBBD - IMPRESSUM