Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'TomTom' disclosed a bug submitted by b'z3xddd' 
b'XSS Reflect'

13 Jun 2019

b'TomTom' disclosed a bug submitted by b'schopathx' 
b'Reflected XSS on www.tomtom.com'

13 Jun 2019

b'Pornhub' disclosed a bug submitted by b'linkks' 
b'xss'

12 Jun 2019

b'Starbucks' disclosed a bug submitted by b'linkks' 
b'PHPinfo page'

12 Jun 2019

b'Unikrn' disclosed a bug submitted by b'professormoriart' 
b'Email abuse and Referral Abuse'

12 Jun 2019

b'Unikrn' disclosed a bug submitted by b'rbcafe' 
b'[unikrn.com] Profile updated with error":true,"success":false"'

12 Jun 2019

b'VLC (European Commission - DIG' disclosed a bug submitted by b'retoor' 
b'Buffer overflow in libavi_plugin memmove() call'

12 Jun 2019

b'Shopify' disclosed a bug submitted by b'h13-' 
b'Unpublished Product Images can be disclosed'

12 Jun 2019

b'Mail.ru' disclosed a bug submitted by b'heeeeen' 
b'Stealing Arbitrary Private Files of MyMail App '

11 Jun 2019

b'VK.com' disclosed a bug submitted by b'ilyamodder' 
b'????????? ?? ???? ?? Android-?????????? ????? ????????? ??????????'

11 Jun 2019

b'PortSwigger Web Security' disclosed a bug submitted by b'jlleitschuh' 
b'Build fetches jars over HTTP'

10 Jun 2019

b'Upserve ' disclosed a bug submitted by b'cache-money' 
b'Ability to create own account UUID leads to stored XSS'

10 Jun 2019

b'Passit' disclosed a bug submitted by b'ni4had' 
b'password rest link not expired after change the password'

10 Jun 2019

b'Central Security Project' disclosed a bug submitted by b'amassey' 
b'Pippo XML Entity Expansion (Billion Laughs Attack)'

10 Jun 2019

b'ICQ' disclosed a bug submitted by b'z0rr0' 
b'Error in processing gif images'

09 Jun 2019

b'HackerOne' disclosed a bug submitted by b'tester1231233' 
b'Password not checked when disabling 2FA on HackerOne'

07 Jun 2019

b'Vanilla' disclosed a bug submitted by b'pipe-to-grep' 
b'Bypassing the Trusted Link Alert System'

07 Jun 2019

b'Upserve ' disclosed a bug submitted by b'sydpy' 
b'Open redirect on https://hq-api.upserve.com/'

07 Jun 2019

b'Ubiquiti Networks' disclosed a bug submitted by b'sandh0t' 
b'CORS Misconfiguration leading to Private Information Disclosure'

07 Jun 2019

b'Upserve ' disclosed a bug submitted by b'stankoja' 
b'Open redirect at https://inventory.upserve.com/http://google.com/'

07 Jun 2019

1 ... 386 387 388 389 390 ... 730

BY DENIS WERNER - @NOBBD - IMPRESSUM