Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Avito' disclosed a bug submitted by b'w2w' 
b'Open Redirect via login avito.ru | Protection bypass'

11 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'try_4_hack' 
b'Nextcloud Clickjacking Vulnerability'

11 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'ahpaleus' 
b'Username Enumeration'

11 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'bibek1' 
b'Clickjacking on https://download.nextcloud.com'

11 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'j4tayu' 
b'Clickjacking on https://nextcloud.com/'

11 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'j4tayu' 
b'Clickjacking on https://download.nextcloud.com/'

11 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'j4tayu' 
b'WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution (UNAUTHORIZED)'

11 Nov 2019

b'Nextcloud' disclosed a bug submitted by b'jarmouz' 
b'XSS On Nextcloud Integrated with zimbra drive'

11 Nov 2019

b'YouPorn' disclosed a bug submitted by b'zerody' 
b'IDOR allows any user to edit others videos'

11 Nov 2019

b'HackerOne' disclosed a bug submitted by b'ayid' 
b'latest_activity_id and latest_activity_at may disclose information about internal activities to unauthorized users'

10 Nov 2019

b'Slack' disclosed a bug submitted by b'fletchto99' 
b'CSS Injection to disable app & potential message exfil'

09 Nov 2019

b'HackerOne' disclosed a bug submitted by b'nathand' 
b'Searching from Hacktivity returns hits for words in limited disclosure reports that are not visible'

08 Nov 2019

b'Ubiquiti Inc.' disclosed a bug submitted by b'b0yd' 
b'Privilege Escalation From user to SYSTEM via unauthenticated command execution '

08 Nov 2019

b'OWOX, Inc.' disclosed a bug submitted by b'mohummad_saqib_arif' 
b'Session is not expire after logout'

08 Nov 2019

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'Stored XSS in https://productreviews.shopifyapps.com/proxy/v4/reviews/product'

08 Nov 2019

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b"Ability to verify any email address you don't own - accounts.shopify.com"

08 Nov 2019

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'Removed staff members who had "Manage shops" permission can still create development stores'

08 Nov 2019

b'Shopify' disclosed a bug submitted by b'zombiehelp54' 
b'H1514 Stored XSS in Return Magic App portal content'

08 Nov 2019

b'Shopify' disclosed a bug submitted by b'mosuan' 
b'Stored XSS in private message'

08 Nov 2019

b'Apache httpd (IBB)' disclosed a bug submitted by b'ccppuu' 
b'mod_remoteip stack buffer overflow and NULL pointer dereference'

07 Nov 2019

1 ... 358 359 360 361 362 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM