Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Bumble' disclosed a bug submitted by b'0x3c3e' 
b'Bruteforce password recovery code'

18 Jan 2020

b'Vanilla' disclosed a bug submitted by b'h1_squirtle' 
b'Abusing "Report as abuse" functionality to delete any user\'s post.'

18 Jan 2020

b'Yelp' disclosed a bug submitted by b'md15ev' 
b'DoS of https://blog.yelp.com/ and other WP instances via CVE-2018-6389'

17 Jan 2020

b'Smule' disclosed a bug submitted by b'so_h1' 
b'Open redirect bypass & SSRF Security Vulnerability'

17 Jan 2020

b'DRIVE.NET, Inc.' disclosed a bug submitted by b'konqi' 
b'???????? XSS ? Business-????????, ?? ???????? ????????'

17 Jan 2020

b'Razer' disclosed a bug submitted by b'sambal0x' 
b"[Razer Pay Mobile App] Broken access control allowing other user's bank account to be deleted"

16 Jan 2020

b'Razer' disclosed a bug submitted by b'st00rm' 
b'Through blocking the redirect in /* the attacker able to bypass Authentication To see Sensitive Data sush as Game Keys , Emails ,..'

16 Jan 2020

b'NordVPN' disclosed a bug submitted by b'shardulb_23' 
b'Disclosure of User Information'

16 Jan 2020

b'MariaDB' disclosed a bug submitted by b'md15ev' 
b'Exposed debug.log file leads to information disclosure'

15 Jan 2020

b'Node.js' disclosed a bug submitted by b'verdaster' 
b'Http response is not ended although underlying socket is already destroyed'

15 Jan 2020

b'Valve' disclosed a bug submitted by b'b0yd' 
b'Arbitrary File Write as SYSTEM from unprivileged user'

15 Jan 2020

b'8x8' disclosed a bug submitted by b'0x496' 
b'Reflected xss on 8x8.vc'

15 Jan 2020

b'DataStax' disclosed a bug submitted by b'priyanshuxo' 
b'Helpdesk Takeover at dmc.datastax.com'

15 Jan 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'ardi4x' 
b'Wordpress users disclosure on blog.makerdao.con'

15 Jan 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'0xbugger' 
b'UNRESTRICTED FILE UPLOAD AT chat.makerdao.com'

15 Jan 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'offensive-security' 
b'Two-factor authentication (2FA) Bypass'

15 Jan 2020

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'm7mdharoun' 
b'App Takeover ( makerdao.herokuapp.com )'

15 Jan 2020

b'Node.js' disclosed a bug submitted by b'bayotop' 
b'url.parse() hostname spoofing via javascript: URIs'

15 Jan 2020

b'curl' disclosed a bug submitted by b'vshmuk' 
b'Port and service scanning on localhost due to improper URL validation.'

15 Jan 2020

b'Node.js' disclosed a bug submitted by b'tunz' 
b'Use After Free in crypto.randomFill'

15 Jan 2020

1 ... 375 376 377 378 379 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM