Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'penlab' 
b'[auto.mail.ru] IDOR ?? ?????????????? ????? ?????? ?????.'

28 Aug 2019

b'Mail.ru' disclosed a bug submitted by b'linkks' 
b'XSS'

28 Aug 2019

b'Mail.ru' disclosed a bug submitted by b'xaleraf4ra' 
b'Information Disclosure - ???????? ?????? ? ??????? ? ? ????????? ???????????? ? ??????'

28 Aug 2019

b'Node.js third-party modules' disclosed a bug submitted by b'chybeta' 
b'[public] Path traversal using symlink'

28 Aug 2019

b'QIWI' disclosed a bug submitted by b'lincoln9932' 
b'account takeover https://teamplay.qiwi.com'

28 Aug 2019

b'QIWI' disclosed a bug submitted by b'lincoln9932' 
b'account takeover https://idea.qiwi.com/ '

28 Aug 2019

b'The Internet' disclosed a bug submitted by b'initstring' 
b'Ubuntu Linux privilege escalation (dirty_sock)'

28 Aug 2019

b'The Internet' disclosed a bug submitted by b'xairy' 
b'Linux kernel: CVE-2017-6074: DCCP double-free vulnerability'

27 Aug 2019

b'MyEtherWallet' disclosed a bug submitted by b'tw96' 
b'Local Storage Custom Node Credentials Leak'

27 Aug 2019

b'MyEtherWallet' disclosed a bug submitted by b'tw96' 
b'Malicious Node JavaScript Injection Leading to Theft of Private Keys and User Funds'

27 Aug 2019

b'New Relic' disclosed a bug submitted by b'sauravpratihar' 
b'Swiftype key stored in JavaScript source'

27 Aug 2019

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'Passcode Protection in Android Devices Can be Bypassed.'

27 Aug 2019

b'TTS Bug Bounty' disclosed a bug submitted by b'niwasaki' 
b'SSRF in Search.gov via ?url= parameter'

26 Aug 2019

b'TTS Bug Bounty' disclosed a bug submitted by b'zephrfish' 
b'Subdomain Takeover due to unclaimed domain pointing to AWS'

26 Aug 2019

b'Twitter' disclosed a bug submitted by b'mr_edwards' 
b'Wrong Interpretation of URL encoded characters, showing different punny code leads to redirection on different domain'

26 Aug 2019

b'WordPress' disclosed a bug submitted by b'gnux' 
b"Reflected XSS on https://make.wordpress.org via 'channel' parameter"

26 Aug 2019

b'Notepad++' disclosed a bug submitted by b'ammm' 
b'Stack overflow affecting "ext" field on stylers.xml configuration file'

25 Aug 2019

b'Notepad++' disclosed a bug submitted by b'ammm' 
b'Stack overflow in XML Parsing'

25 Aug 2019

b'Node.js third-party modules' disclosed a bug submitted by b'toannc123' 
b'[statichttpserver] List any file in the folder by using path traversal.'

25 Aug 2019

b'Khan Academy' disclosed a bug submitted by b'katsuragicsl' 
b'Subdomain takeover on healthyhackathon.khanacademy.org and hackweek.khanacademy.org'

25 Aug 2019

1 ... 383 384 385 386 387 ... 741

BY DENIS WERNER - @NOBBD - IMPRESSUM