Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'50m-ctf' disclosed a bug submitted by b'sampriti' 
b'CTF Writeup - c8889970d9fb722066f31e804e351993'

08 Apr 2019

b'50m-ctf' disclosed a bug submitted by b'voidmercy' 
b'CTF Writeup'

08 Apr 2019

b'50m-ctf' disclosed a bug submitted by b'lucio' 
b'`Cody trolled us all` h1-702 CTF write-up'

08 Apr 2019

b'50m-ctf' disclosed a bug submitted by b'abdilahrf_' 
b'Writeup Hackerone 50M CTF'

08 Apr 2019

b'50m-ctf' disclosed a bug submitted by b'bitk' 
b'Writeup '

08 Apr 2019

b'50m-ctf' disclosed a bug submitted by b'collinmay' 
b'Various vulnerabilities ultimately lead to attacker control over FliteThermostat server and access to internal accounting application source code'

08 Apr 2019

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t' 
b'[harp] File access even when they have been set to be ignored.'

06 Apr 2019

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t' 
b'[harp] Unsafe rendering of Markdown files'

06 Apr 2019

b'Automattic' disclosed a bug submitted by b'yzy9951' 
b'[FG-VD-19-022] Wordpress WooCommerce Cross-Site Scripting Vulnerability Notification'

06 Apr 2019

b'Vanilla' disclosed a bug submitted by b'foobar7' 
b'FileUpload Plugin: CSRF (delete all attached files)'

06 Apr 2019

b'Vanilla' disclosed a bug submitted by b'foobar7' 
b'Persistent XSS via Signatures'

06 Apr 2019

b'Vanilla' disclosed a bug submitted by b'foobar7' 
b'jsConnect Plugin: Takeover of existing account'

06 Apr 2019

b'GitLab' disclosed a bug submitted by b'rpadovani' 
b"Removing a user from a private group doesn't remove him from group's project, if his project's role was changed"

05 Apr 2019

b'HackerOne' disclosed a bug submitted by b'eremeev' 
b'Invited team member can disclosure slack channels'

05 Apr 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cablej_dds' 
b'??????? Site Exposes DD2648 forms'

05 Apr 2019

b'HackerOne' disclosed a bug submitted by b'kapytein' 
b'Path traversal leading to limited CSRF on GET requests on two endpoints'

05 Apr 2019

b'GitLab' disclosed a bug submitted by b'edoverflow' 
b"Claiming package names in GitLab's automatic package referencer."

05 Apr 2019

b'HackerOne' disclosed a bug submitted by b'fransrosen' 
b'Client-Side Race Condition using Marketo, allows sending user to data-protocol in Safari when form without onSuccess is submitted on www.hackerone.com'

05 Apr 2019

b'Shopify' disclosed a bug submitted by b'jobert' 
b'H1514 Shopify API ruby SDK session setup lacks input validation, resulting in SSRF and leakage of client secret'

05 Apr 2019

b'Unikrn' disclosed a bug submitted by b'v4lid0l' 
b'bypass Claudflare access crm.mautic.com'

05 Apr 2019

1 ... 397 398 399 400 401 ... 729

BY DENIS WERNER - @NOBBD - IMPRESSUM