Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Valve' disclosed a bug submitted by b'moskowsky' 
b'SQL Injection in report_xml.php through countryFilter[] parameter'

27 Jul 2018

b'Monero' disclosed a bug submitted by b'phiren' 
b'Attcker can trick monero wallet into reporting it recived twice as much with alternative tx_keypubs'

27 Jul 2018

b'GitLab' disclosed a bug submitted by b'rootbakar28' 
b'HTML TAG INJECTION ON PROFILE NAME'

27 Jul 2018

b'Monero' disclosed a bug submitted by b'kaulse' 
b'forum.getmonero.org Shell upload'

27 Jul 2018

b'Node.js third-party modules' disclosed a bug submitted by b'5ilverhawk' 
b'stored xss in scrape-metadata when reading metadata from an html page'

27 Jul 2018

b'HackerOne' disclosed a bug submitted by b'hackerone_007' 
b'HackerOne customer submitted sensitive link to VirusTotal, exposing confidential information'

26 Jul 2018

b'Shopify' disclosed a bug submitted by b'palant' 
b'Preview bar: Incomplete message origin validation results in XSS'

26 Jul 2018

b'Automattic' disclosed a bug submitted by b'luigigubello' 
b'RCE via Print function [Simplenote 1.1.3 - Desktop app] '

26 Jul 2018

b'New Relic' disclosed a bug submitted by b'scrszy' 
b'stamp2-azure-ext.newrelic.com is vulnerable to MS12-020'

24 Jul 2018

b'New Relic' disclosed a bug submitted by b'badcracker' 
b' Missing security best practices (leads to further impact) '

24 Jul 2018

b'Passit' disclosed a bug submitted by b'exception' 
b'X-Content-Type-Options has not been set at app.passit.io'

24 Jul 2018

b'WordPress' disclosed a bug submitted by b'arunthelegion' 
b'xss - reflected'

24 Jul 2018

b'Starbucks' disclosed a bug submitted by b'txt3rob' 
b'svcardproxydevus.starbucks.com Subdomain take over'

23 Jul 2018

b'Starbucks' disclosed a bug submitted by b'blurbdust' 
b'Subdomain takeover on svcgatewaydevus.starbucks.com and svcgatewayloadus.starbucks.com'

23 Jul 2018

b'Starbucks' disclosed a bug submitted by b'qwacsawd' 
b"Able to reset other user's password in https://card.starbucks.com.sg/"

23 Jul 2018

b'HackerOne' disclosed a bug submitted by b'tisisire' 
b'Information leakage - Private reports cached by Google '

23 Jul 2018

b'WordPress' disclosed a bug submitted by b'mopman' 
b'XSS on support.wordcamp.org in ajax-quote.php'

23 Jul 2018

b'WordPress' disclosed a bug submitted by b'sameerphad72' 
b'Open API For Username enumeration'

23 Jul 2018

b'Vanilla' disclosed a bug submitted by b'geekboy' 
b'Overwrite Drafts of Everyone '

23 Jul 2018

b'Vanilla' disclosed a bug submitted by b'geekboy' 
b'Accessing Private Files Shared in message of other users'

23 Jul 2018

1 ... 402 403 404 405 406 ... 692

BY DENIS WERNER - @NOBBD - IMPRESSUM