Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'ICQ' disclosed a bug submitted by b'n4sty' 
b'Stored xss on message reply'

29 Jun 2019

b'ICQ' disclosed a bug submitted by b'n4sty' 
b'[web.icq.com] Stored XSS in "? ????????"'

29 Jun 2019

b'Slack' disclosed a bug submitted by b'hanno' 
b'Invitation reminder emails contain insecure links'

29 Jun 2019

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Disclosing a private program in an external link if program is paused'

28 Jun 2019

b'Omise' disclosed a bug submitted by b'honoki' 
b'SSRF in webhooks leads to AWS private keys disclosure'

28 Jun 2019

b'Shopify' disclosed a bug submitted by b'mosuan' 
b'Stored XSS in Discounts section'

27 Jun 2019

b'Nextcloud' disclosed a bug submitted by b'frr' 
b'Expired reshare links allow access to all files in share'

27 Jun 2019

b'TomTom' disclosed a bug submitted by b'vijay922' 
b'Apache mod_status /server-status Information Disclosure'

27 Jun 2019

b'Nextcloud' disclosed a bug submitted by b'sjw' 
b'Stored XSS/HTML injection in autocomplete suggestions for sharing'

27 Jun 2019

b'Nextcloud' disclosed a bug submitted by b'fancycode' 
b'Uploading large avatar images cause excessive CPU usage'

27 Jun 2019

b'Nextcloud' disclosed a bug submitted by b'nickvergessen' 
b'Private/confidential setting of calendar events is ignored on activity stream'

27 Jun 2019

b'Homebrew' disclosed a bug submitted by b'hi_ztz' 
b'Homebrew privilege escalation vulnerability'

27 Jun 2019

b'HackerOne' disclosed a bug submitted by b'metnew' 
b'Team member with Program permission only can escalate to Admin permission'

26 Jun 2019

b'OLX' disclosed a bug submitted by b'codeslayer137' 
b'SQL Injection https://www.olx.co.id'

26 Jun 2019

b'Nextcloud' disclosed a bug submitted by b'mru1' 
b' Predictable Random Number Generator'

26 Jun 2019

b'Nextcloud' disclosed a bug submitted by b'doragon' 
b'Retrieval and alteration of exposed media on Android Oreo '

26 Jun 2019

b'Cuvva' disclosed a bug submitted by b'badcracker' 
b'Unclaimed facebook page at www.cuvva.com/about'

25 Jun 2019

b'Upserve ' disclosed a bug submitted by b'gamer7112' 
b'DOM Based XSS via postMessage at https://inventory.upserve.com/login/'

25 Jun 2019

b'Mail.ru' disclosed a bug submitted by b's_p_q_r' 
b'[e.mail.ru] XSS ? ??????'

25 Jun 2019

b'SEMrush' disclosed a bug submitted by b'fransrosen' 
b'Remote Code Execution on www.semrush.com/my_reports on Logo upload'

24 Jun 2019

1 ... 383 384 385 386 387 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM