The unofficial HackerOne disclosure Timeline

b'Kaspersky' disclosed a bug submitted by b'palant'
b"[IE browser integration] Websites can hijack Kaspersky's command interface"

24 Nov 2019 timeline

b'Razer' disclosed a bug submitted by b'enesdexh1'
b'DOM XSS at https://www.thx.com in IE/Edge browser'

23 Nov 2019 timeline

b'HackerOne' disclosed a bug submitted by b'haxta4ok00'
b'Team object in GraphQL disclosed of private programs via the industry'

23 Nov 2019 timeline

b'ZEIT' disclosed a bug submitted by b'caesareg'
b'Unauthorized admission to any team in zeit.co'

23 Nov 2019 timeline

b'Nextcloud' disclosed a bug submitted by b'guilhermecruzdev'
b'The password recovery let users know whether an email address exists or not in the website'

22 Nov 2019 timeline

b'GitLab' disclosed a bug submitted by b'8ayac'
b'DoS attack via comment on Issue'

21 Nov 2019 timeline

b'Badoo' disclosed a bug submitted by b'nazmul7462'
b'Reflected XSS'

21 Nov 2019 timeline

b'LocalTapiola' disclosed a bug submitted by b'muon4'
b'CORS misconfiguration allows to steal customers data '

21 Nov 2019 timeline

b'Zomato' disclosed a bug submitted by b'pandaaaa'
b'[www.zomato.com] Blind XSS on one of the Admin Dashboard'

19 Nov 2019 timeline

b'Starbucks' disclosed a bug submitted by b'radoooz'
b'Thailand - a small number of SMB CCTV footage backup servers were accessible without authentication.'

19 Nov 2019 timeline

b'Monero' disclosed a bug submitted by b'evertonmelo'
b'CVE-2019-13132 - libzmq 4.1 series is vulnerable'

18 Nov 2019 timeline

b'Starbucks' disclosed a bug submitted by b'radoooz'
b'Thailand \xe2\x80\x93 a small number of alarm system portals accessible with the default credentials'

18 Nov 2019 timeline

b'Starbucks' disclosed a bug submitted by b'khovansky'
b'Improper handling of payment callback allows topping up a Swiss Starbucks Card bypassing actual payment via a crafted success message'

18 Nov 2019 timeline

b'Monero' disclosed a bug submitted by b'l00ph0le'
b'Monero Wallet Gui for Windows (Arbitrary Code Execution)'

18 Nov 2019 timeline

b'VK.com' disclosed a bug submitted by b'korniltsev'
b'?????? ? com.vk.usersstore.UsersContentProvider, ???????? ?????? exchange_token ?? android < 21'

18 Nov 2019 timeline

b'Slack' disclosed a bug submitted by b'hanno'
b'Linux Desktop application slack executable does not use pie / no ASLR'

17 Nov 2019 timeline

b'WordPress' disclosed a bug submitted by b'irsdl'
b'"Bad Protocols Validation" Bypass in "wp_kses_bad_protocol_once" using HTML-encoding without trailing semicolons'

16 Nov 2019 timeline

b'Ruby' disclosed a bug submitted by b'358'
b'WEBrick::HTTPAuth::DigestAuth authentication is vulnerable to regular expression denial of service (ReDoS)'

15 Nov 2019 timeline

b'QIWI' disclosed a bug submitted by b'circuit'
b'?????-?? ???????? ??? ? ????? ????? http://shop.tochka.com'

15 Nov 2019 timeline

b'Monero' disclosed a bug submitted by b'ftramer'
b'Exploiting Network and Timing Side-Channels to Break Monero Receiver Anonymity'

15 Nov 2019 timeline

1 ... 381 382 383 384 385 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.