Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'eequalsmc2' 
b'Lack of proper paymentProfileUUID validation allows any number of free rides without any outstanding balance'

18 Jul 2019

b'Chainlink' disclosed a bug submitted by b'jaisharma' 
b'Testnet address being sent in cleartext as http://rinkeby.chain.link/ is missing SSL certificate'

17 Jul 2019

b'Vanilla' disclosed a bug submitted by b'klmunday' 
b'Stored XSS in Rich editor via Embed datetime'

17 Jul 2019

b'Vanilla' disclosed a bug submitted by b'klmunday' 
b'Stored XSS in Profile Comments'

17 Jul 2019

b'Vanilla' disclosed a bug submitted by b'klmunday' 
b'Stored XSS in embedded posts containing images'

17 Jul 2019

b'Vanilla' disclosed a bug submitted by b'klmunday' 
b'Hidden Stored XSS in nested post embeds'

17 Jul 2019

b'GitLab' disclosed a bug submitted by b'nyangawa' 
b'Local files could be overwritten in GitLab, leading to remote command execution'

17 Jul 2019

b'Maximum' disclosed a bug submitted by b'sicarius' 
b'Wrong link on corne.maximum.nl'

16 Jul 2019

b'Ian Dunn' disclosed a bug submitted by b'littlegeek' 
b'xmlrpc.php FILE IS enable on Main website'

16 Jul 2019

b'Grammarly' disclosed a bug submitted by b'metnew' 
b'`socket` command allows sending data over WebSockets to arbitrary origins from Grammarly Extension'

15 Jul 2019

b'Shopify' disclosed a bug submitted by b'modam3r5' 
b'any staff members have the ability to comment in [discounts] he/she can disable comment section it to other staff even the admin of the store'

15 Jul 2019

b'Vanilla' disclosed a bug submitted by b'alb3r7' 
b'Unsanitized user photo paths allow local file read'

13 Jul 2019

b'Vanilla' disclosed a bug submitted by b'alb3r7' 
b'Stored XSS in vanilla'

13 Jul 2019

b'Maximum' disclosed a bug submitted by b'page1337' 
b'Sql-inj in https://maximum.com/ajax/people'

12 Jul 2019

b'Informatica' disclosed a bug submitted by b'modam3r5' 
b'[https://life.informatica.com] - information disclose '

12 Jul 2019

b'Smule' disclosed a bug submitted by b'dhakalananda' 
b'Missing Rate Limit in Password Change'

12 Jul 2019

b'VK.com' disclosed a bug submitted by b'cheatboss' 
b'??????????? ?????? ? ???????? ???? ?? ?????? ???? ?? ??? ????? ?? ???????.'

11 Jul 2019

b'VK.com' disclosed a bug submitted by b'cheatboss' 
b'???????? ????? ?????? ?? ?? ????.'

11 Jul 2019

b'HackerOne' disclosed a bug submitted by b'neema' 
b'View HackerOne challenge scope before challenge begins'

11 Jul 2019

b'Tube8' disclosed a bug submitted by b'sp1d3rs' 
b'Blind SQL injection and making any profile comments from any users to disappear using "like" function (2 in 1 issues)'

11 Jul 2019

1 ... 387 388 389 390 391 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM