Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'krupnikas' 
b'Public available Sensitive Information about drivers'

18 Dec 2019

b'Polymail, Inc.' disclosed a bug submitted by b'renekroka' 
b'Reflected XSS by changing url parameters on the user invite onboarding links.'

18 Dec 2019

b'QIWI' disclosed a bug submitted by b'circuit' 
b'hard-use account takeover qiwi.com'

18 Dec 2019

b'Stripo Inc' disclosed a bug submitted by b'pirate_' 
b'Redirection through referer tag'

18 Dec 2019

b'Stripo Inc' disclosed a bug submitted by b'rutik346' 
b'Able to change password by entering wrong old password'

18 Dec 2019

b'Stripo Inc' disclosed a bug submitted by b'eliel' 
b'SSRF in /cabinet/stripeapi/v1/siteInfoLookup?url=XXX'

18 Dec 2019

b'Chaturbate' disclosed a bug submitted by b'zhutyra' 
b'Camo Image Proxy Bypass with CSS Escape Sequences'

18 Dec 2019

b'Twitter' disclosed a bug submitted by b'startbug' 
b'Stored XSS in https://app.mopub.com'

17 Dec 2019

b'Mail.ru' disclosed a bug submitted by b'agametov' 
b'Cross-site Scripting (XSS) - Reflected vseapteki.ru'

17 Dec 2019

b'Mail.ru' disclosed a bug submitted by b'r0hack' 
b'Account Takeover at worki.ru'

17 Dec 2019

b'Mail.ru' disclosed a bug submitted by b'agametov' 
b'IDOR ? ?????? ????????????? ?? ?????? ? relap.io'

17 Dec 2019

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'Cross-site Scripting (XSS) - Stored in RDoc wiki pages'

16 Dec 2019

b'GitLab' disclosed a bug submitted by b'vakzz' 
b"Git flag injection - Search API with scope 'blobs' "

15 Dec 2019

b'Node.js third-party modules' disclosed a bug submitted by b'rugged_info' 
b'Lack of input validation and sanitization in react-autolinker-wrapper library causes XSS '

15 Dec 2019

b'GitLab' disclosed a bug submitted by b'rpadovani' 
b'Group search leaks private MRs, code, commits'

14 Dec 2019

b'GitLab' disclosed a bug submitted by b'rpadovani' 
b'Group search with Elastic search enable leaks unrelated data'

14 Dec 2019

b'Imgur' disclosed a bug submitted by b'soheilkhodayari' 
b'De-anonymization Attack: Cross Site Information Leakage'

14 Dec 2019

b'Polymail, Inc.' disclosed a bug submitted by b'bluebert' 
b'Bug in OAuth Success Redirect URI Validation'

13 Dec 2019

b'Twitter' disclosed a bug submitted by b'jlleitschuh' 
b'[Twitter Open Source] Releases were & are built/executed/tested/released in the context of insecure/untrusted code'

13 Dec 2019

b'GitLab' disclosed a bug submitted by b'ngalog' 
b'Bypass Email Verification using Salesforce -- Reproducible in gitlab.com'

13 Dec 2019

1 ... 378 379 380 381 382 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM