Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'ok.ru' disclosed a bug submitted by b'iframe' 
b'Privilege Escalation ??????? ??? ????????? ?????? ? okl.lt'

23 Jul 2019

b'Mail.ru' disclosed a bug submitted by b'xalerafera' 
b'???????? .htaccess ?? cookery.zakazaka.ru'

23 Jul 2019

b'ok.ru' disclosed a bug submitted by b'iframe' 
b'[okl.lt] ????????? ????????????????? ??????? ? .js + ??????????? ????????????? ???? ???????.'

23 Jul 2019

b'ok.ru' disclosed a bug submitted by b'iframe' 
b'[okmedia.insideok.ru] Web Cache Poisoing & XSS'

23 Jul 2019

b'HackerOne' disclosed a bug submitted by b'reigertje' 
b'Private information exposed through GraphQL filters'

23 Jul 2019

b'Starbucks' disclosed a bug submitted by b'geek_jeremy' 
b'Blind SQLi leading to RCE, from Unauthenticated access to a test API Webservice'

22 Jul 2019

b'HackerOne' disclosed a bug submitted by b'dropper' 
b'Race Condition in Flag Submission'

22 Jul 2019

b'WordPress' disclosed a bug submitted by b'paragonie-scott' 
b'WordPress Automatic Update Protocol Does Not Authenticate Updates Provided by the Server'

22 Jul 2019

b'Nextcloud' disclosed a bug submitted by b'leonklingele' 
b'Arbitrary SQL command injection'

21 Jul 2019

b'Smule' disclosed a bug submitted by b'red_assassin' 
b'Web cache poisoning leads to disclosure of CSRF token and sensitive information'

21 Jul 2019

b'GitLab' disclosed a bug submitted by b'xanbanx' 
b'Milestones leaked via search API'

19 Jul 2019

b'Mail.ru' disclosed a bug submitted by b'kassih' 
b'Cross-site Scripting (XSS) - Stored in ru.mail.mailapp'

19 Jul 2019

b'GitLab' disclosed a bug submitted by b'nyangawa' 
b'Persistent XSS in Note objects'

19 Jul 2019

b'WordPress' disclosed a bug submitted by b'mygf' 
b'Stored XSS Vulnerability'

18 Jul 2019

b'ExpressionEngine' disclosed a bug submitted by b'winst0n13' 
b'Open Redirect in comment section'

18 Jul 2019

b'Imgur' disclosed a bug submitted by b'rioncool22' 
b'BUG XSS IN "ADD IMAGES"'

18 Jul 2019

b'Maximum' disclosed a bug submitted by b'sicarius' 
b"Developper's websites are easily accessibles leading to massive information disclosure"

18 Jul 2019

b'Chainlink' disclosed a bug submitted by b'danangtriatmaja' 
b'No Valid SPF Records.'

18 Jul 2019

b'Semmle' disclosed a bug submitted by b'zealsham' 
b'Server side includes in https://lgtm-com.pentesting.semmle.net/internal_api/v0.2/savePublicInformation leads to 500 server error and D-DOS'

18 Jul 2019

b'Mail.ru' disclosed a bug submitted by b'ruvlol' 
b'LRF on shared.mail.ru due to "markdown" plugin'

18 Jul 2019

1 ... 393 394 395 396 397 ... 745

BY DENIS WERNER - @NOBBD - IMPRESSUM