Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Uber' disclosed a bug submitted by b'0x0luke' 
b'XSS on partners.uber.com due to no user input sanitisation '

04 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'mase289' 
b'Cross-origin resource sharing: arbitrary origin trusted on chatws25.stream.highwebmedia.com'

04 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'`settingcontent-ms` files lacks "mark of the web" => execute code by dbl click in Downloads toolbar'

04 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'Cross-origin page stays focused before/after downloading + uninformative modal window for download'

04 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'`alert()` dialogs on `chrome-extension://` origin (internal pages)'

04 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'URL spoofing using protocol handlers'

04 Oct 2018

b'Brave Software' disclosed a bug submitted by b'metnew' 
b'URL spoofing in Brave for macOS'

04 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'pisarenko' 
b'?????????? ????? ??? ? ????????? ???????????? !'

03 Oct 2018

b'Mail.Ru' disclosed a bug submitted by b'saiyajin' 
b'XSS in touch.mail.ru '

02 Oct 2018

b'PHP (IBB)' disclosed a bug submitted by b'cymtrick' 
b'Improper handling of Chunked data request in sapi_apache2.c leads to Reflected XSS'

02 Oct 2018

b'Apache httpd (IBB)' disclosed a bug submitted by b'bobrov' 
b'mod_userdir CRLF injection (CVE-2016-4975)'

02 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'ninjan' 
b'Internal loop going to infinite for cb.setTimeout(func, msecs) for broadcast app.'

01 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'toth' 
b'A 10GB file is reachable'

01 Oct 2018

b'Shopify' disclosed a bug submitted by b'm7mdharoun' 
b'subdomain Takeover at blog.exchangemarketplace.com '

01 Oct 2018

b'ICQ' disclosed a bug submitted by b'3c75' 
b'Gain access to random information via group chat "about" property'

01 Oct 2018

b'Reverb.com' disclosed a bug submitted by b'sandeep_hodkasia' 
b'Stored xss in shop name @ lp.reverb.com'

01 Oct 2018

b'ICQ' disclosed a bug submitted by b'executor' 
b'Stored xss ? ??????????? ?????????.'

01 Oct 2018

b'ICQ' disclosed a bug submitted by b'n4sty' 
b'XSS ??? ?????????? ? ??? ???????????? '

01 Oct 2018

b'ICQ' disclosed a bug submitted by b'flamezzz' 
b'[web.icq.com] Stored XSS in link when sending message'

01 Oct 2018

b'Chaturbate' disclosed a bug submitted by b'lucky_sen' 
b'Rate limit missing at room login'

30 Sep 2018

1 ... 388 389 390 391 392 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM