Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'GitLab' disclosed a bug submitted by b'dhakalananda' 
b'Inadequate cache control in gitter allows to view private chat room'

08 Mar 2019

b'Starbucks' disclosed a bug submitted by b'cujanovic' 
b'Reflected Cross site Scripting (XSS) on www.starbucks.com'

08 Mar 2019

b'Starbucks' disclosed a bug submitted by b'loxiran' 
b'Bug in GraphQL and API integration leads to limited user address disclosure'

08 Mar 2019

b'Rockstar Games' disclosed a bug submitted by b'netfuzzer' 
b'Stealing Facebook OAuth Code Through Screenshot viewer'

05 Mar 2019

b'Mail.ru' disclosed a bug submitted by b'hudmi' 
b'[pandao.ru] ??????????? ???????? ?????????????? ???????? ??????'

05 Mar 2019

b'Homebrew' disclosed a bug submitted by b'pappan' 
b'Email enumeration of users'

05 Mar 2019

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Exfiltrate and mutate repository and project data through injected templated service'

05 Mar 2019

b'Unikrn' disclosed a bug submitted by b'noob-walid' 
b'ssh: unprivileged users may hijack due to backdated ssh version open port found(???.unikrn.com)'

04 Mar 2019

b"Hanno's projects" disclosed a bug submitted by b'anonym0us_py' 
b'Bypassing the fix of #503922'

04 Mar 2019

b'OLX' disclosed a bug submitted by b'paulochoupina' 
b'XSS - main page - search[user_id] parameter'

03 Mar 2019

b"Hanno's projects" disclosed a bug submitted by b'zophi' 
b'Open redirect on the https://tt.hboeck.de'

03 Mar 2019

b'GitLab' disclosed a bug submitted by b'jobert' 
b"Snippet JS template allows attacker to read a user's private snippets"

03 Mar 2019

b'Urban Dictionary' disclosed a bug submitted by b'red_assassin' 
b'Users able to set video url for unpublished words and able to see the name of unpublished words'

02 Mar 2019

b'Imgur' disclosed a bug submitted by b'giddsec' 
b'Stored XSS on imgur profile'

02 Mar 2019

b'Twitter' disclosed a bug submitted by b'mik317' 
b'CSRF on https://www.niche.co leads to "account disconnection"'

02 Mar 2019

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t' 
b'[glance] Access unlisted internal files/folders revealing sensitive information'

28 Feb 2019

b'Twitter' disclosed a bug submitted by b'healdb' 
b'Takeover of Twitter-owned domain at mobileapplinking.com'

28 Feb 2019

b'Twitter' disclosed a bug submitted by b'mik317' 
b'CSRF and probable account takeover on https://www.niche.co'

28 Feb 2019

b'Mavenlink' disclosed a bug submitted by b'tolo7010' 
b'User uploaded portfolio files can be accessed by any user even after deleted'

27 Feb 2019

b'Mavenlink' disclosed a bug submitted by b'tolo7010' 
b'CSRF Add user templates'

27 Feb 2019

1 ... 402 403 404 405 406 ... 729

BY DENIS WERNER - @NOBBD - IMPRESSUM