Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitLab' disclosed a bug submitted by b'nyangawa' 
b'Local files could be overwritten in GitLab, leading to remote command execution'

17 Jul 2019

b'Maximum' disclosed a bug submitted by b'sicarius' 
b'Wrong link on corne.maximum.nl'

16 Jul 2019

b'Ian Dunn' disclosed a bug submitted by b'littlegeek' 
b'xmlrpc.php FILE IS enable on Main website'

16 Jul 2019

b'Grammarly' disclosed a bug submitted by b'metnew' 
b'`socket` command allows sending data over WebSockets to arbitrary origins from Grammarly Extension'

15 Jul 2019

b'Shopify' disclosed a bug submitted by b'modam3r5' 
b'any staff members have the ability to comment in [discounts] he/she can disable comment section it to other staff even the admin of the store'

15 Jul 2019

b'Vanilla' disclosed a bug submitted by b'alb3r7' 
b'Unsanitized user photo paths allow local file read'

13 Jul 2019

b'Vanilla' disclosed a bug submitted by b'alb3r7' 
b'Stored XSS in vanilla'

13 Jul 2019

b'Maximum' disclosed a bug submitted by b'page1337' 
b'Sql-inj in https://maximum.com/ajax/people'

12 Jul 2019

b'Informatica' disclosed a bug submitted by b'modam3r5' 
b'[https://life.informatica.com] - information disclose '

12 Jul 2019

b'Smule' disclosed a bug submitted by b'dhakalananda' 
b'Missing Rate Limit in Password Change'

12 Jul 2019

b'VK.com' disclosed a bug submitted by b'cheatboss' 
b'??????????? ?????? ? ???????? ???? ?? ?????? ???? ?? ??? ????? ?? ???????.'

11 Jul 2019

b'VK.com' disclosed a bug submitted by b'cheatboss' 
b'???????? ????? ?????? ?? ?? ????.'

11 Jul 2019

b'HackerOne' disclosed a bug submitted by b'neema' 
b'View HackerOne challenge scope before challenge begins'

11 Jul 2019

b'Tube8' disclosed a bug submitted by b'sp1d3rs' 
b'Blind SQL injection and making any profile comments from any users to disappear using "like" function (2 in 1 issues)'

11 Jul 2019

b'Rocket.Chat' disclosed a bug submitted by b'sanjogpanda' 
b'Slack Token exposed over internet (Github)'

11 Jul 2019

b'Dropbox' disclosed a bug submitted by b'hanno' 
b'Fedora installation instructions fetch repo and validation key from insecure source, allowing mitm attack'

10 Jul 2019

b'VHX' disclosed a bug submitted by b'sp1d3rs' 
b'Possibility to overwrite any file in the vpe.cdn.vimeo.tv leads to the Stored XSS for the all customers on the embed.vhx.tv'

10 Jul 2019

b'Maximum' disclosed a bug submitted by b'lewerkun' 
b'Information disclosure through directory listing at http://dockerhost01.maximum.nl:8080'

10 Jul 2019

b'Maximum' disclosed a bug submitted by b'0xradi' 
b'Ability To Takeover any account by Emaill.'

10 Jul 2019

b'Unikrn' disclosed a bug submitted by b'xb00ck' 
b'multiple vulnerabilities on your mautic server'

10 Jul 2019

1 ... 387 388 389 390 391 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM