Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'NordVPN' disclosed a bug submitted by b'hassancypher' 
b'Host header injection/redirection | signup and login page'

21 Feb 2020

b'NordVPN' disclosed a bug submitted by b'shardulb_23' 
b'CORS Misconfiguration on nordvpn.com leading to Private Information Disclosure,Account takeover'

21 Feb 2020

b'RATELIMITED' disclosed a bug submitted by b'miguel_santareno' 
b'Cross Site Request Forgery in auth in https://auth.ratelimited.me/'

21 Feb 2020

b'NordVPN' disclosed a bug submitted by b'x54xc3' 
b'nordvpn Linux Desktop executable application does not use pie / no ASLR'

21 Feb 2020

b'HackerOne' disclosed a bug submitted by b'msdian7' 
b'Email address of any user can be queried on Report Invitation GraphQL type when username is known'

20 Feb 2020

b'Open-Xchange' disclosed a bug submitted by b'zhutyra' 
b'SSRF - Image Sources in HTML Snippets - 727234 bypass'

20 Feb 2020

b'Open-Xchange' disclosed a bug submitted by b'zhutyra' 
b'Unchecked URL in attachment datasource'

20 Feb 2020

b'Open-Xchange' disclosed a bug submitted by b'zhutyra' 
b'SSRF - URL Attachments - 725307 bypass'

20 Feb 2020

b'Nextcloud' disclosed a bug submitted by b'mayankraheja069' 
b'Email Spoofing'

20 Feb 2020

b'Valve' disclosed a bug submitted by b'xpaw' 
b'GetGlobalAchievementPercentagesForApp is missing the same release checks as GetSchemaForGame'

19 Feb 2020

b'WakaTime' disclosed a bug submitted by b'phhitachi' 
b'Broken Authentication and session management OWASP A2'

19 Feb 2020

b'Stripo Inc' disclosed a bug submitted by b'pain45' 
b'SSRF & unrestricted file upload on https://my.stripo.email/'

19 Feb 2020

b'Valve' disclosed a bug submitted by b'hackerontwowheels' 
b'Steam chat - trade offer presentation vulnerability'

19 Feb 2020

b'Razer' disclosed a bug submitted by b'fpatrik' 
b'Reflected XSS in eform.molpay.com'

18 Feb 2020

b'Razer' disclosed a bug submitted by b'0xpegg' 
b'Admin Management - Login Using Default Password - Leads to Image Upload Backdoor/Shell'

18 Feb 2020

b'Razer' disclosed a bug submitted by b'iamsahana' 
b'Payment PIN Verification Bypass'

18 Feb 2020

b'Razer' disclosed a bug submitted by b'corraldev' 
b'[pay.gold.razer.com] Stored XSS - Order payment'

18 Feb 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'h4x0rm4n' 
b'DoS of https://blog.makerdao.com/ via CVE-2018-6389'

18 Feb 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'h4x0rm4n' 
b'xmlrpc.php FILE IS enable it will used for Bruteforce attack '

18 Feb 2020

b'Node.js third-party modules' disclosed a bug submitted by b's_p_q_r' 
b'[reveal.js] XSS by calling arbitrary method via postMessage'

18 Feb 2020

1 ... 360 361 362 363 364 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM