Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'OLX' disclosed a bug submitted by b'nullcod3r' 
b'SQL Injection on https://www.olx.co.id'

20 Aug 2019

b'Central Security Project' disclosed a bug submitted by b'cbagdude' 
b'OS Command Injection in Nexus Repository Manager 2.x'

20 Aug 2019

b'WakaTime' disclosed a bug submitted by b'tkd8' 
b'bypass csrftoken at profile name.'

20 Aug 2019

b'Node.js third-party modules' disclosed a bug submitted by b'inkz' 
b'[larvitbase-api] Unintended Require'

20 Aug 2019

b'TTS Bug Bounty' disclosed a bug submitted by b'rooghz' 
b'xmlrpc.php file enabled - data.gov'

19 Aug 2019

b'Grammarly' disclosed a bug submitted by b'brdoors3' 
b'Previously created sessions continue being valid after MFA activation'

19 Aug 2019

b'Mail.ru' disclosed a bug submitted by b'funt0m' 
b'Full Path Disclosure'

19 Aug 2019

b'Mail.ru' disclosed a bug submitted by b'theappsec' 
b'[e.mail.ru] Stored xss in Mpop cookie'

19 Aug 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arinerron2' 
b'SQL Injection in ????'

19 Aug 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arinerron2' 
b'SQL Injection in ????'

19 Aug 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'arinerron2' 
b'Trace.axd page leaks sensitive information'

19 Aug 2019

b'SEMrush' disclosed a bug submitted by b'artemis233' 
b'SSRF In Get Video Contents'

19 Aug 2019

b'Informatica' disclosed a bug submitted by b'e3xpl0it' 
b'[kb.informatica.com] Dom Based xss'

17 Aug 2019

b'Node.js' disclosed a bug submitted by b'jasnell' 
b'Multiple HTTP/2 DOS Issues'

16 Aug 2019

b'OX App Suite' disclosed a bug submitted by b'secator' 
b'[XSS] RSS Feed Widget'

16 Aug 2019

b'Zomato' disclosed a bug submitted by b'sjvino' 
b'Able to manipulate order amount by removing cancellation amount and cause financial impact'

16 Aug 2019

b'Twitter' disclosed a bug submitted by b'muhammad139' 
b'Github Token Leaked publicly for https://github.com/mopub'

15 Aug 2019

b'Starbucks' disclosed a bug submitted by b'mindtrick' 
b'Subdomain takeover of d02-1-ag.productioncontroller.starbucks.com'

15 Aug 2019

b'Grammarly' disclosed a bug submitted by b'chackmate' 
b'Can register any mobile number in MFA without current code.'

15 Aug 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'rootaccess' 
b'SQL Injection vulnerability located at ????????'

15 Aug 2019

1 ... 376 377 378 379 380 ... 733

BY DENIS WERNER - @NOBBD - IMPRESSUM