REPORTS
PROGRAMS
PUBLISHERS
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Ping Identity'
disclosed a bug submitted by
b'bug_digger21'
b'Google Maps API key leaked during device pairing'
28 Apr 2020
b'Stripo Inc'
disclosed a bug submitted by
b'nihadp'
b'CORS on my.stripo.email'
28 Apr 2020
b'Node.js third-party modules'
disclosed a bug submitted by
b'posix'
b'Prototype pollution attack (lodash)'
27 Apr 2020
b'Node.js third-party modules'
disclosed a bug submitted by
b'macasun'
b'Crash Node.js process from handlebars using a small and simple source'
27 Apr 2020
b'GitLab'
disclosed a bug submitted by
b'vakzz'
b'Arbitrary file read via the UploadsRewriter when moving and issue'
27 Apr 2020
b'Shopify'
disclosed a bug submitted by
b'danerh'
b'Session works after logout from Shopify account and password of online store is displayed'
27 Apr 2020
b'Roblox'
disclosed a bug submitted by
b'jfc5sb'
b'Insecure redirect rule results in bypassing ban redirect on certain pages'
26 Apr 2020
b'Slack'
disclosed a bug submitted by
b'akaki'
b'URL link spoofing'
26 Apr 2020
b'Node.js third-party modules'
disclosed a bug submitted by
b'visat'
b'[Total.js] Path traversal vulnerability allows to read files outside public directory'
25 Apr 2020
b'Node.js third-party modules'
disclosed a bug submitted by
b'mik317'
b'[git-promise] RCE via insecure command formatting'
25 Apr 2020
b'Cuvva'
disclosed a bug submitted by
b'fsm'
b'Time-limit Bypassing, Rate-limit Bypassing and Spamming at https://ops.cuvva.co'
24 Apr 2020
b'Roblox'
disclosed a bug submitted by
b'geekboy'
b'Subdomain Takeover to Authentication bypass '
23 Apr 2020
b'Uber'
disclosed a bug submitted by
b'healdb'
b'ubernycmarketplace.com is vulnerable to the Heartbleed Bug'
23 Apr 2020
b'Uber'
disclosed a bug submitted by
b'peroni'
b'Full Path and internal information disclosure+ SQLNet.log file disclose internal network information'
23 Apr 2020
b'Visma Public'
disclosed a bug submitted by
b'gamliel'
b'Able to continue user creation process after deleting the HTML element that shows the message that the session is closed'
23 Apr 2020
b'Omise'
disclosed a bug submitted by
b'rioncool22'
b'Signup with any email and enable 2FA without verifying email'
23 Apr 2020
b'Stripo Inc'
disclosed a bug submitted by
b'what_web'
b'[www.stripo.email] You can override the speed limit by adding the X-Forwarded-For header.'
23 Apr 2020
b'Ruby'
disclosed a bug submitted by
b'jeremyevans'
b'Variant of CVE-2013-0269 (Denial of Service and Unsafe Object Creation Vulnerability in JSON)'
23 Apr 2020
b'Mail.ru'
disclosed a bug submitted by
b'empty-jack'
b'[v7lk.relap.io] Sending arbitrary emails to any user'
22 Apr 2020
b'Mail.ru'
disclosed a bug submitted by
b'ksapphire'
b'Mail.Ru Top - Website Counter Bruteforcing'
22 Apr 2020
1
...
348
349
350
351
352
...
776
BY DENIS WERNER - @NOBBD -
IMPRESSUM
