Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitLab' disclosed a bug submitted by b'mario-areias' 
b'Persistent XSS via e-mail when creating merge requests'

30 Aug 2019

b'GitLab' disclosed a bug submitted by b'ngalog' 
b'Bypass Email Verification -- Able to Access Internal Gitlab Services that use Login with Gitlab and Perform Check on email domain'

30 Aug 2019

b'GitLab' disclosed a bug submitted by b'jobert' 
b"GitLab's GitHub integration is vulnerable to SSRF vulnerability"

30 Aug 2019

b'Imgur' disclosed a bug submitted by b'hogarth45' 
b'CSRF leads to a stored self xss'

30 Aug 2019

b'New Relic' disclosed a bug submitted by b'albinowax' 
b'Password theft login.newrelic.com via Request Smuggling'

30 Aug 2019

b'Nextcloud' disclosed a bug submitted by b'jelle293' 
b'Missing DNSSEC'

29 Aug 2019

b'Nextcloud' disclosed a bug submitted by b'freddyb' 
b'Reflected XSS / Markup Injection in `index.php/svg/core/logo/logo` parameter `color`'

29 Aug 2019

b'Phabricator' disclosed a bug submitted by b'ranjit_p' 
b'IDOR bug to See hidden slowvote of any user even when you dont have access right'

29 Aug 2019

b'WordPress' disclosed a bug submitted by b'ashketchum' 
b'Parameter tampering : Price Manipulation of Products'

29 Aug 2019

b'Ruby' disclosed a bug submitted by b'kyoshida' 
b'OS Command Injection via egrep in Rake::FileList'

29 Aug 2019

b'Shipt' disclosed a bug submitted by b'streaak' 
b'Slack token leaking in stackoverflow and devtimes '

29 Aug 2019

b'Kaspersky' disclosed a bug submitted by b'palant' 
b'Certificate warnings and similar UI elements are susceptible to clickjacking'

28 Aug 2019

b'Kaspersky' disclosed a bug submitted by b'palant' 
b'Opening up a Universal XSS vulnerability in Microsoft Edge'

28 Aug 2019

b'GitLab' disclosed a bug submitted by b'uzsunny' 
b'Access Projects And create projects in gitlab pre production server'

28 Aug 2019

b'Starbucks' disclosed a bug submitted by b'parzel' 
b'Subdomain takeover of datacafe-cert.starbucks.com'

28 Aug 2019

b'WordPress' disclosed a bug submitted by b'foobar7' 
b'Reflected XSS: Taxonomy Converter via tax parameter'

28 Aug 2019

b'Kartpay' disclosed a bug submitted by b'ayushoberoi' 
b'URl redirection '

28 Aug 2019

b'Kartpay' disclosed a bug submitted by b'lollol1' 
b'Option method enabled in kartpay Webservers'

28 Aug 2019

b'Kartpay' disclosed a bug submitted by b'amolcg' 
b'Application Error disclosure, Verification token seen error and user able to change password'

28 Aug 2019

b'Kartpay' disclosed a bug submitted by b'iheb_hamad1' 
b'SMTP Failure Leads to Chain of Internal System Failure'

28 Aug 2019

1 ... 370 371 372 373 374 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM