Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'icewater' 
b"Share recipient can modify a share's expiration date"

31 Jan 2020

b'Nextcloud' disclosed a bug submitted by b'tribut' 
b'Nextcloud logs ldap passwords'

31 Jan 2020

b'Insolar' disclosed a bug submitted by b'nmesnap' 
b'XDSI(Cross Domain Script Inclusion)'

31 Jan 2020

b'Nextcloud' disclosed a bug submitted by b'shawalkhan' 
b'Bruteforce in admin panel'

31 Jan 2020

b'Nextcloud' disclosed a bug submitted by b'clizsec' 
b'SQL exception in JSON format'

31 Jan 2020

b'U.S. Dept Of Defense' disclosed a bug submitted by b'niteshsurana' 
b'Public instance of Jenkins on https://??????????/ with /script enabled'

31 Jan 2020

b'Nextcloud' disclosed a bug submitted by b'whitehat_hacker' 
b"Github repo's wiki publicly editable"

31 Jan 2020

b'Nextcloud' disclosed a bug submitted by b'bernhardposselt' 
b'Update App Store: Django account high jacking vulnerability'

31 Jan 2020

b'Nextcloud' disclosed a bug submitted by b'nursoda' 
b'File-drop content is visible through the gallery app'

31 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'renekroka' 
b'Tabnabbing in template comments - stripo.email'

31 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'renekroka' 
b'Stored XSS in template comments.'

31 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'homains' 
b'Open memory dump method leaking customer information ,secret keys , password , source code & admin accounts'

31 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'effectrenan' 
b'Command Injection vulnerability in kill-port-process package'

30 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'bluebridsec' 
b'stripo blog search SQL Injection'

30 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'hackthetime' 
b'subdomain takeover at status-stage0.stripo.email'

30 Jan 2020

b'WordPress' disclosed a bug submitted by b'ajxchapman' 
b'Wordpress unzip_file path traversal'

29 Jan 2020

b'Yelp' disclosed a bug submitted by b'bellpwn' 
b'Multiple Vulnerabilities in (*.blog.yelp.com) - Leakage user admin Sensitive Exposure'

29 Jan 2020

b'Starbucks' disclosed a bug submitted by b'zude' 
b"Account take over of 'light' starbuckscardb2b users"

29 Jan 2020

b'Starbucks' disclosed a bug submitted by b'laszaro' 
b'WAF bypass via double encoded non standard ASCII chars permitted a reflected XSS on response page not found pages - (629745 bypass)'

29 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'johnssimon007' 
b'[deliver-or-else] Path Traversal'

29 Jan 2020

1 ... 354 355 356 357 358 ... 758

BY DENIS WERNER - @NOBBD - IMPRESSUM