Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'CFP Time' disclosed a bug submitted by b'drosofraymaybe' 
b'Content spoofing on error pages or text injection'

08 Jan 2019

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'phreak' 
b'Production secret key leak in config/secrets.yml'

08 Jan 2019

b'Urban Dictionary' disclosed a bug submitted by b'linkks' 
b'Source Code Disclosure'

08 Jan 2019

b'Valve' disclosed a bug submitted by b'ronak_9889' 
b'Comment restriction in subsection "Workshop" of domain "steamcommunity.com" can be bypassed using IDOR'

07 Jan 2019

b'Valve' disclosed a bug submitted by b'xpaw' 
b'Reflected XSS on help.steampowered.com'

07 Jan 2019

b'Valve' disclosed a bug submitted by b'tvmpt' 
b'XSS @ store.steampowered.com via agecheck path name'

07 Jan 2019

b'Valve' disclosed a bug submitted by b'romesful' 
b"CSRF | Ban or unban users in broadcast's chat"

07 Jan 2019

b'Valve' disclosed a bug submitted by b'mvc' 
b"Stored XSS in the guide's GameplayVersion (www.dota2.com)"

07 Jan 2019

b'Valve' disclosed a bug submitted by b'zemnmez' 
b'code injection, steam chat client'

07 Jan 2019

b'Valve' disclosed a bug submitted by b'zemnmez' 
b'XSS in steam react chat client'

07 Jan 2019

b'HackerOne' disclosed a bug submitted by b'khoiasd' 
b'Response program can create bounty table'

07 Jan 2019

b'CFP Time' disclosed a bug submitted by b'phsmile' 
b'Missing Two Factor Authentication in /admin/login'

07 Jan 2019

b'Nextcloud' disclosed a bug submitted by b'ismailtsdln' 
b'Information Exposure Through Directory Listing - https://apps.nextcloud.com/static/'

07 Jan 2019

b'CFP Time' disclosed a bug submitted by b'badcracker' 
b'Error Page Content Spoofing or Text Injection'

07 Jan 2019

b'Node.js third-party modules' disclosed a bug submitted by b'cris_semmle' 
b'Command Injection Vulnerability in kill-port Package'

06 Jan 2019

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t' 
b'[buttle] Unsafe rendering of Markdown files'

06 Jan 2019

b'Liberapay' disclosed a bug submitted by b'gouveaheitor' 
b'User Enumeration '

05 Jan 2019

b'HackerOne' disclosed a bug submitted by b'mga_bobo' 
b"User login page doesn't implement any form of rate limiting"

04 Jan 2019

b'Inflection' disclosed a bug submitted by b'csanuragjain' 
b'Malicious callback url can be set while creating application in identity'

03 Jan 2019

b'Node.js third-party modules' disclosed a bug submitted by b'shivasurya' 
b'[static-resource-server] Path Traversal allows to read content of arbitrary file on the server'

03 Jan 2019

1 ... 371 372 373 374 375 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM