Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Nextcloud' disclosed a bug submitted by b'bernhardposselt' 
b'Update App Store: Django account high jacking vulnerability'

31 Jan 2020

b'Nextcloud' disclosed a bug submitted by b'nursoda' 
b'File-drop content is visible through the gallery app'

31 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'renekroka' 
b'Tabnabbing in template comments - stripo.email'

31 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'renekroka' 
b'Stored XSS in template comments.'

31 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'homains' 
b'Open memory dump method leaking customer information ,secret keys , password , source code & admin accounts'

31 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'effectrenan' 
b'Command Injection vulnerability in kill-port-process package'

30 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'bluebridsec' 
b'stripo blog search SQL Injection'

30 Jan 2020

b'Stripo Inc' disclosed a bug submitted by b'hackthetime' 
b'subdomain takeover at status-stage0.stripo.email'

30 Jan 2020

b'WordPress' disclosed a bug submitted by b'ajxchapman' 
b'Wordpress unzip_file path traversal'

29 Jan 2020

b'Yelp' disclosed a bug submitted by b'bellpwn' 
b'Multiple Vulnerabilities in (*.blog.yelp.com) - Leakage user admin Sensitive Exposure'

29 Jan 2020

b'Starbucks' disclosed a bug submitted by b'zude' 
b"Account take over of 'light' starbuckscardb2b users"

29 Jan 2020

b'Starbucks' disclosed a bug submitted by b'laszaro' 
b'WAF bypass via double encoded non standard ASCII chars permitted a reflected XSS on response page not found pages - (629745 bypass)'

29 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'johnssimon007' 
b'[deliver-or-else] Path Traversal'

29 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'johnssimon007' 
b'[md-fileserver] Path Traversal'

29 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'johnssimon007' 
b'[file-browser] Inadequate Output Encoding and Escaping '

29 Jan 2020

b'Mail.ru' disclosed a bug submitted by b'orlserg' 
b'Account takeover via CORS misconfigutation on https://beta.delivery-club.ru'

29 Jan 2020

b'Mail.ru' disclosed a bug submitted by b'johndoe1492' 
b'SSRF in clients.city-mobil.ru'

29 Jan 2020

b'Mail.ru' disclosed a bug submitted by b'kiriknik' 
b'Blind SQL Injection in city-mobil.ru domain'

29 Jan 2020

b'Starbucks' disclosed a bug submitted by b'neweq' 
b'China - ecjobsdc.starbucks.com.cn html/shtml file upload vulnerability'

29 Jan 2020

b'Node.js third-party modules' disclosed a bug submitted by b'princechaddha' 
b'Denial Of Service in Strapi Framework using argument injection'

28 Jan 2020

1 ... 372 373 374 375 376 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM