Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'DuckDuckGo' disclosed a bug submitted by b'cujanovic' 
b'DOM XSS on 50x.html page'

16 Oct 2018

b'Tor' disclosed a bug submitted by b'greenwolf' 
b'Email Spoofing Possible on torproject.org Email Domain'

16 Oct 2018

b'Starbucks' disclosed a bug submitted by b'radoooz' 
b'DVR default username and password'

15 Oct 2018

b'New Relic' disclosed a bug submitted by b'jon_bottarini' 
b'[NR Insights] Pull any Insights/NRQL data from any NR account'

15 Oct 2018

b'PHP (IBB)' disclosed a bug submitted by b'fms' 
b'linkinfo - openbasedir bypass on Windows PHP'

15 Oct 2018

b'Stellar.org' disclosed a bug submitted by b'nebolsin' 
b"It's possible to put SDX orderbook into invalid state and execute trades at arbitrary price"

14 Oct 2018

b'Node.js third-party modules' disclosed a bug submitted by b'cris_semmle' 
b'Command Injection Vulnerability in libnmap Package'

14 Oct 2018

b'Stellar.org' disclosed a bug submitted by b'orbitlens' 
b'Exploitable vulnerability in SDEX'

14 Oct 2018

b'MariaDB' disclosed a bug submitted by b'putsi' 
b'SSRF on jira.mariadb.org'

13 Oct 2018

b'Zendesk' disclosed a bug submitted by b'apfeifer27' 
b'Stored Cross Site Scripting on Zendesk agent dashboard'

12 Oct 2018

b'MariaDB' disclosed a bug submitted by b'vijay_kumar1110' 
b'xmlrpc.php on mariadb.org can lead to DDOS and brute force attacks'

12 Oct 2018

b'Pornhub' disclosed a bug submitted by b'dudez' 
b'Stored XSS in photo comment functionality'

12 Oct 2018

b'MariaDB' disclosed a bug submitted by b'niteshpande' 
b'vulnerable to Cross-site Request Forgery'

12 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'w2w' 
b'Double authentication bypass'

11 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'w2w' 
b'http://admin.proonline.group (gifts.mail.ru shop operator) admin panel blind XSS'

11 Oct 2018

b'Redtube' disclosed a bug submitted by b'sp1d3rs' 
b'Stored XSS on the https://www.redtube.com/users/[profile]/collections'

10 Oct 2018

b'Redtube' disclosed a bug submitted by b'sp1d3rs' 
b'Stored XSS in galleries - https://www.redtube.com/gallery/[id] path'

10 Oct 2018

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'Unauthenticated user can upload an attachment to the last updated report draft'

09 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'Navigation to restricted origins via "Open in new tab"'

09 Oct 2018

b'Infogram' disclosed a bug submitted by b'the_legend' 
b'possibility to create account without username'

09 Oct 2018

1 ... 387 388 389 390 391 ... 693

BY DENIS WERNER - @NOBBD - IMPRESSUM