Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Monero' disclosed a bug submitted by b'equim' 
b'Trusted daemon check fails when proxied through torsocks or proxychains'

02 Aug 2018

b'Monero' disclosed a bug submitted by b'moneromooo' 
b'Misreporting of received amount by show_transfers'

02 Aug 2018

b'Monero' disclosed a bug submitted by b'ahook' 
b'epee will accept an arbitrary amount of leading line-breaks in an http request'

02 Aug 2018

b'Monero' disclosed a bug submitted by b'ahook' 
b'monerod can be disabled by a well-timed TCP reset packet'

02 Aug 2018

b'Monero' disclosed a bug submitted by b'jagerman' 
b'A bug in the Monero wallet balance can enable theft from exchanges'

02 Aug 2018

b'Rockstar Games' disclosed a bug submitted by b'alexbirsan' 
b'LFI and SSRF via XXE in emblem editor'

01 Aug 2018

b'GoCD' disclosed a bug submitted by b'4cad' 
b'Spring security configuration allows agent sessions to be hijacked'

31 Jul 2018

b'Augur' disclosed a bug submitted by b'karalabe' 
b'Full UI hijack via dormant browser service workers'

31 Jul 2018

b'Mail.Ru' disclosed a bug submitted by b's_p_q_r' 
b'[account.mail.ru] XSS ?? ???????? ???????? ???????? ????? backUrl'

31 Jul 2018

b'Mail.Ru' disclosed a bug submitted by b's_p_q_r' 
b'[account.mail.ru] XSS ?? ???????? ?????????????? ??????'

31 Jul 2018

b'Trello' disclosed a bug submitted by b'woj_ciech' 
b'Stored XSS in Treeview plugin'

30 Jul 2018

b'Slack' disclosed a bug submitted by b'0x0luke' 
b'HTML Injection inside Slack promotional emails'

30 Jul 2018

b'LocalTapiola' disclosed a bug submitted by b'rootnepal' 
b'Wordpress Users Disclosure (/wp-json/wp/v2/users/)'

30 Jul 2018

b'Node.js third-party modules' disclosed a bug submitted by b'lolwaleet' 
b'url-parse package return wrong hostname '

30 Jul 2018

b'Nextcloud' disclosed a bug submitted by b'yzy9951' 
b'[FG-VD-17-063] NextCloud Insufficient Attack Protection Vulnerability Notification'

29 Jul 2018

b'Nextcloud' disclosed a bug submitted by b'kaysbugs' 
b'bypass of 2FA'

29 Jul 2018

b'Harvest' disclosed a bug submitted by b'config' 
b'Unrestricted View to People\xe2\x80\x99s Web Invoices Data without knowing the Unique Hash'

29 Jul 2018

b'Harvest' disclosed a bug submitted by b'config' 
b'Content Injection at First & Last Name Parameters that could Lead Fraud Issue'

29 Jul 2018

b'VK.com' disclosed a bug submitted by b'trainzment' 
b'???????? ?????????? ?????? ???????????? / ??????'

28 Jul 2018

b'Valve' disclosed a bug submitted by b'moskowsky' 
b'SQL Injection in report_xml.php through countryFilter[] parameter'

27 Jul 2018

1 ... 401 402 403 404 405 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM