Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Every.org' disclosed a bug submitted by b'harshitshah4' 
b'Improper email address verifiation while saving Account Details'

23 Mar 2020

b'Valve' disclosed a bug submitted by b'xpaw' 
b'Hidden scheduled partner events are propagated to Steam clients in CMsgClientClanState'

20 Mar 2020

b'HackerOne' disclosed a bug submitted by b'yashrs' 
b'Race Condition leads to undeletable group member'

20 Mar 2020

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'Unauthenticated users can obtain information about Checklist objects with unclaimed ChecklistCheck objects'

20 Mar 2020

b'PicsArt' disclosed a bug submitted by b'donhasan' 
b'User account compromised authentication bypass via oauth token impersonation'

20 Mar 2020

b'Myndr' disclosed a bug submitted by b'thilakesh' 
b'Reflected XSS in https://blocked.myndr.net'

19 Mar 2020

b'MariaDB' disclosed a bug submitted by b'badis' 
b'scripts loader (denial of service) vulnerability'

19 Mar 2020

b'OLX' disclosed a bug submitted by b'badis' 
b'load scripts DOS vulnerability'

19 Mar 2020

b'Reverb.com' disclosed a bug submitted by b'sandeep_hodkasia' 
b'Full account takeover'

19 Mar 2020

b'Razer' disclosed a bug submitted by b'zelzal' 
b'Misconfigured Bucket [razer-assets2] https://assets2.razerzone.com/'

18 Mar 2020

b'Razer' disclosed a bug submitted by b'nnez' 
b'Reflected XSS on https://www.easytopup.in.th/store/product/return on parameter mref_id'

18 Mar 2020

b'Razer' disclosed a bug submitted by b'marzuki1337' 
b'AWS subdomain Takeover at estore.razersynapse.com'

18 Mar 2020

b'Starbucks' disclosed a bug submitted by b'bytebunny' 
b'Singapore - IDOR in campaign.starbucks.com.sg'

17 Mar 2020

b'Starbucks' disclosed a bug submitted by b'k3mlol' 
b'China - president-starbucks.com.cn DNS configuration reported as takeover'

17 Mar 2020

b'Starbucks' disclosed a bug submitted by b'e4366eolywrgpidfbio' 
b'Minimal information disclosure of internal asset names and links which were not publicly accessible.'

17 Mar 2020

b'Starbucks' disclosed a bug submitted by b'jackb898' 
b'athome.starbucks.com - URL parameter tampering of review forms permitted possible content injection'

17 Mar 2020

b'Starbucks' disclosed a bug submitted by b'gamer7112' 
b'DOM XSS on app.starbucks.com via ReturnUrl'

17 Mar 2020

b'Mail.ru' disclosed a bug submitted by b'circuit' 
b'[https://seosan.io] Account owner disclosure'

16 Mar 2020

b'Shopify' disclosed a bug submitted by b'mosuan' 
b'Timeline Editor Self-XSS (Previous Fix #738072 Incomplete)'

16 Mar 2020

b'Node.js third-party modules' disclosed a bug submitted by b'visat' 
b'[htmr] DOM-based XSS'

15 Mar 2020

1 ... 350 351 352 353 354 ... 768

BY DENIS WERNER - @NOBBD - IMPRESSUM