Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Razer' disclosed a bug submitted by b'nnez' 
b'DOM-based XSS on https://zest.co.th/zestlinepay/'

25 Feb 2020

b'Mail.ru' disclosed a bug submitted by b'd3athstrok3' 
b'XSS via HTTP request version in account.my.games'

25 Feb 2020

b'Mail.ru' disclosed a bug submitted by b'orlserg' 
b'CSRF in attach phone API endpoint on delivery-club.ru'

25 Feb 2020

b'CompanyHub' disclosed a bug submitted by b'el_chapo' 
b'No Rate Limit On forgot Password Leading To Massive Email Flooding'

25 Feb 2020

b'Node.js' disclosed a bug submitted by b'alyssawilk' 
b'HTTP header values do not have trailing OWS trimmed'

24 Feb 2020

b'NordVPN' disclosed a bug submitted by b'alishah' 
b'No Rate Limit On Forgot Password Page Of affiliates.nordvpn.com'

24 Feb 2020

b'NordVPN' disclosed a bug submitted by b'mase289' 
b'Blind SSRF on debug.nordvpn.com due to misconfigured sentry instance'

24 Feb 2020

b'NordVPN' disclosed a bug submitted by b'enixium' 
b'Password Reset Link Works Multiple Times'

24 Feb 2020

b'ForeScout Technologies' disclosed a bug submitted by b'a_constant' 
b'HTML Injection & Content Spoofing'

24 Feb 2020

b'Node.js third-party modules' disclosed a bug submitted by b'kelotex' 
b'Several simple remote code execution in pdf-image'

24 Feb 2020

b'Valve' disclosed a bug submitted by b'splatt581' 
b'Malformed save files (.sav) allow to write files with arbitrary extensions and content in GoldSrc-based games.'

24 Feb 2020

b'Topcoder' disclosed a bug submitted by b'0x496' 
b'Cross Site Scripting via CVE-2018-5230 on https://apps.topcoder.com'

24 Feb 2020

b'NordVPN' disclosed a bug submitted by b'martinbydefault' 
b'Connection informaton is sent to a third-party service'

23 Feb 2020

b'Stellar.org' disclosed a bug submitted by b'suvrat7' 
b'Bypassing Verify Humans Page'

23 Feb 2020

b'Stellar.org' disclosed a bug submitted by b'ramakanthk35' 
b'Direct URL access to PDF files'

23 Feb 2020

b'Stellar.org' disclosed a bug submitted by b'vyshnav_nk' 
b'xss'

23 Feb 2020

b'Stellar.org' disclosed a bug submitted by b'abo-jehad' 
b'brute force attack allowed on admin page https://www.stellar.org/wp-admin/'

23 Feb 2020

b'Stellar.org' disclosed a bug submitted by b'hach3ro' 
b'Admin panel of https://www.stellar.org/wp-admin/'

23 Feb 2020

b'Maximum' disclosed a bug submitted by b'zeop' 
b'x-request-id header reflected in server response without sanitization'

22 Feb 2020

b'Automattic' disclosed a bug submitted by b'hacki3boy' 
b'Modify account details by exploiting clickjacking vulnerability on refer.wordpress.com'

22 Feb 2020

1 ... 364 365 366 367 368 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM