Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'qw3ty' 
b'program_analytics_benchmarks query shows information not visible in public'

27 Mar 2020

b'NordVPN' disclosed a bug submitted by b'needmoneyasap' 
b'Hard-coded API keys at NordVpn Android App'

27 Mar 2020

b'Informatica' disclosed a bug submitted by b'min4tor' 
b'RXSS in http://procurement-businesscatalog.informatica.com'

27 Mar 2020

b'Twitter' disclosed a bug submitted by b'meepmerp' 
b'User input validation can lead to DOS'

26 Mar 2020

b'NordVPN' disclosed a bug submitted by b'd4rk_g1rl' 
b'Unauthorized User Can Delete Any User Account'

26 Mar 2020

b'Visma Bug Bounty Program' disclosed a bug submitted by b'muon4' 
b'SSRF in img export'

26 Mar 2020

b'Visma Bug Bounty Program' disclosed a bug submitted by b'muon4' 
b'Stored XSS when uploading files to an invoice'

26 Mar 2020

b'Valve' disclosed a bug submitted by b'kohtep2010' 
b'Malformed BSP in GoldSrc Engine may cause shellcode injection'

25 Mar 2020

b'Valve' disclosed a bug submitted by b'kohtep2010' 
b'Vulnerability in GoldSource Engine allows to upload and run an arbitrary DLL on client'

25 Mar 2020

b'Valve' disclosed a bug submitted by b'hunterstanton' 
b'Malformed NAV file leads to buffer overflow and code execution in Left4Dead2.exe'

25 Mar 2020

b'Qulture.Rocks' disclosed a bug submitted by b'pain45' 
b'Privilege escalation from member user ( editor ) to admin user'

25 Mar 2020

b'Twitter' disclosed a bug submitted by b'naategh' 
b'Reset password without knowing current password'

25 Mar 2020

b'Vanilla' disclosed a bug submitted by b'mindingdata' 
b'XSS For Profile Name'

25 Mar 2020

b'Vanilla' disclosed a bug submitted by b'mindingdata' 
b'Conversation API Leaks Details Of UnAuthorized Conversations'

25 Mar 2020

b'Visma Bug Bounty Program' disclosed a bug submitted by b'base_64' 
b'[IDOR]Ability to Pause & Resume the Invoice of other users If GUID is known.'

25 Mar 2020

b'Visma Bug Bounty Program' disclosed a bug submitted by b'base_64' 
b'[IDOR]Ability to View/Delete/Edit (Forward to attachment archive) Email of other user if GUID is known.'

25 Mar 2020

b'Stripo Inc' disclosed a bug submitted by b'pain45' 
b'XSRF Token is Not being validated when sending emails test request which lead to CSRF attack using the flash file + 307 redirect technique'

25 Mar 2020

b'GitLab' disclosed a bug submitted by b'shaileshpratapwar' 
b'Email notification about login email changed is not received when using verified linked email address'

25 Mar 2020

b'Open-Xchange' disclosed a bug submitted by b'zhutyra' 
b'SSRF - Office Documents - Image URL'

25 Mar 2020

b'Stripo Inc' disclosed a bug submitted by b'pain45' 
b'Strored Xss on https://my.stripo.email/ ( multiple inputs)'

25 Mar 2020

1 ... 354 355 356 357 358 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM