Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Shopify' disclosed a bug submitted by b'davscol94' 
b'xss stored'

03 Apr 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'th3cyb3rc0p' 
b'load scripts DOS vulnerability'

02 Apr 2020

b'Open-Xchange' disclosed a bug submitted by b'catenacyber' 
b'Buffer overread in parse_angle_addr called from message_address_parse_path '

02 Apr 2020

b'SEMrush' disclosed a bug submitted by b'ziko_amazigh' 
b'Reflected XSS on https://www.semrush.com/my_reports/externalSource/callback/googleAccountsGMB'

02 Apr 2020

b'Vanilla' disclosed a bug submitted by b'vivek111' 
b' XSS through chat messages'

02 Apr 2020

b'SEMrush' disclosed a bug submitted by b'a_d_a_m' 
b'IDOR in marketing calendar tool'

02 Apr 2020

b'SEMrush' disclosed a bug submitted by b'yashrs' 
b'An attacker can buy marketplace articles for lower prices as it allows for negative quantity values leading to business loss'

02 Apr 2020

b'SEMrush' disclosed a bug submitted by b'nikitastupin' 
b'Content Injection on api.semrush.com to Reflected XSS'

02 Apr 2020

b'Node.js third-party modules' disclosed a bug submitted by b'sontungatm' 
b'[utils-extend] Prototype pollution '

02 Apr 2020

b'Slack' disclosed a bug submitted by b'jhancock' 
b'Relative Path Vulnerability Results in Arbitrary Command Execution/Privilege Escalation'

01 Apr 2020

b'Razer' disclosed a bug submitted by b'sambal0x' 
b'[Razer Pay] Broken Access Control at /v1/verifyPhone/ allows enumeration of usernames and ID information'

01 Apr 2020

b'Razer' disclosed a bug submitted by b'p3rr0' 
b'Access to support tickets and payment history, impersonate razer support staff'

01 Apr 2020

b'Shopify' disclosed a bug submitted by b'ngalog' 
b'[Part II] Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege Escalation'

01 Apr 2020

b'Shopify' disclosed a bug submitted by b'ngalog' 
b'Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege Escalation to Any Shop Owner by Taking Advantage of the Shopify SSO'

01 Apr 2020

b'Shopify' disclosed a bug submitted by b'ngalog' 
b'Able to Takeover Merchants Accounts Even They Have Already Setup SSO, After Bypassing the Email Confirmation'

01 Apr 2020

b'Ubiquiti Inc.' disclosed a bug submitted by b'ajxchapman' 
b'UniFi Video web interface Configuration Restore user privilege escalation'

01 Apr 2020

b'Ubiquiti Inc.' disclosed a bug submitted by b'ajxchapman' 
b'UniFi Video Server web interface admin user Firmware Update path traversal leading to local system compromise'

01 Apr 2020

b'Starbucks' disclosed a bug submitted by b'neweq' 
b'China - Leaked credentials permitted a limited ability to create Starbucks coupons and cards'

01 Apr 2020

b'Ubiquiti Inc.' disclosed a bug submitted by b'b0yd' 
b'UniFi Video v3.10.1 (Windows) Local Privileges Escalation to SYSTEM from arbitrary filedelete and DLL hijack vulnerabilities.'

01 Apr 2020

b'Starbucks' disclosed a bug submitted by b'0xpatrik' 
b'China \xe2\x80\x93 Limited Partner PII Regarding Work Scheduling via Unauthenticated API Endpoint'

01 Apr 2020

1 ... 347 348 349 350 351 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM