Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'bibek1' 
b'Clickjacking on https://download.nextcloud.com'

11 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'j4tayu' 
b'Clickjacking on https://nextcloud.com/'

11 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'j4tayu' 
b'Clickjacking on https://download.nextcloud.com/'

11 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'j4tayu' 
b'WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution (UNAUTHORIZED)'

11 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'jarmouz' 
b'XSS On Nextcloud Integrated with zimbra drive'

11 Nov 2019

b'YouPorn' disclosed a bug submitted by b'zerody' 
b'IDOR allows any user to edit others videos'

11 Nov 2019

b'HackerOne' disclosed a bug submitted by b'ayid' 
b'latest_activity_id and latest_activity_at may disclose information about internal activities to unauthorized users'

10 Nov 2019

b'Slack' disclosed a bug submitted by b'fletchto99' 
b'CSS Injection to disable app & potential message exfil'

09 Nov 2019

b'HackerOne' disclosed a bug submitted by b'nathand' 
b'Searching from Hacktivity returns hits for words in limited disclosure reports that are not visible'

08 Nov 2019

b'Ubiquiti Inc.' disclosed a bug submitted by b'b0yd' 
b'Privilege Escalation From user to SYSTEM via unauthenticated command execution '

08 Nov 2019

b'OWOX, Inc.' disclosed a bug submitted by b'mohummad_saqib_arif' 
b'Session is not expire after logout'

08 Nov 2019

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'Stored XSS in https://productreviews.shopifyapps.com/proxy/v4/reviews/product'

08 Nov 2019

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b"Ability to verify any email address you don't own - accounts.shopify.com"

08 Nov 2019

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'Removed staff members who had "Manage shops" permission can still create development stores'

08 Nov 2019

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'H1514 Stored XSS in Return Magic App portal content'

08 Nov 2019

b'Shopify' disclosed a bug submitted by b'mosuan' 
b'Stored XSS in private message'

08 Nov 2019

b'Apache httpd (IBB)' disclosed a bug submitted by b'ccppuu' 
b'mod_remoteip stack buffer overflow and NULL pointer dereference'

07 Nov 2019

b'Razer' disclosed a bug submitted by b'anshuman_pattnaik' 
b'2FA doesn\'t work in "https://insider.razer.com"'

07 Nov 2019

b'Grammarly' disclosed a bug submitted by b'foobar7' 
b'Permissive CORS policy trusting arbitrary extensions origin'

06 Nov 2019

b'Shopify' disclosed a bug submitted by b'ehsahil' 
b"Shopify's SF and LA offices Dashboard Information disclosed via Public Gist"

06 Nov 2019

1 ... 353 354 355 356 357 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM