Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Zendesk' disclosed a bug submitted by b'rubyroobs' 
b'Leaked artifactory_key, artifactory_api_key, and gcloud refresh_token via GitHub.'

23 Apr 2019

b'Revive Adserver' disclosed a bug submitted by b'mbeccati' 
b'Deserialization of Untrusted Data in www/delivery/adxmlrpc.php'

23 Apr 2019

b'Revive Adserver' disclosed a bug submitted by b'mbeccati' 
b'Deserialization of Untrusted Data in www/delivery/dxmlrpc.php'

23 Apr 2019

b'Revive Adserver' disclosed a bug submitted by b'sumni' 
b'Open redirect in switch account functionality'

23 Apr 2019

b'Grammarly' disclosed a bug submitted by b'metnew' 
b'`open-url` command allows opening unlimited number of tabs pointing to arbitrary URLs'

23 Apr 2019

b'HackerOne' disclosed a bug submitted by b'spaceraccoon' 
b'Unreleased CTF Levels are Revealed on /group/user/ID1?user=USERID endpoint'

23 Apr 2019

b'Shipt' disclosed a bug submitted by b'mdspr99' 
b'Sensitive Clickjacking on admin login page.'

22 Apr 2019

b'Monero' disclosed a bug submitted by b'organdonor1' 
b'RingCT malformed tx prevents target from being able to sweep balance'

20 Apr 2019

b'GitLab' disclosed a bug submitted by b'jobert' 
b'JSON serialization of any Project model results in all Runner tokens being exposed through Quick Actions'

20 Apr 2019

b'concrete5' disclosed a bug submitted by b'hexife' 
b'SVG file that HTML Included is able to upload via File Manager'

20 Apr 2019

b'HackerOne' disclosed a bug submitted by b'constructor2019' 
b'Homograph attack in escalate report'

19 Apr 2019

b'Twitter' disclosed a bug submitted by b'terjanq' 
b'Protected tweets exposure through the URL'

19 Apr 2019

b'GitLab' disclosed a bug submitted by b'rijalrojan' 
b'Full access to internal Gitlab instances at redash.gitlab.com, dashboards.gitlab.com, prometheus.gitlab.com'

19 Apr 2019

b'Shopify' disclosed a bug submitted by b'filedescriptor' 
b'H1514 DOMXSS on Embedded SDK via Shopify.API.setWindowLocation abusing cookie Stuffing'

17 Apr 2019

b'Nextcloud' disclosed a bug submitted by b'foobar7' 
b'Talk / spreed: Disclosure of Room names and participants for password protected rooms'

17 Apr 2019

b'Central Security Project' disclosed a bug submitted by b'amassey' 
b'c3p0 may be exploited by a Billion Laughs Attack when loading XML configuration'

16 Apr 2019

b'Zomato' disclosed a bug submitted by b'pasw' 
b'[api.zomato.com] Able to manipulate order amount'

16 Apr 2019

b'Zomato' disclosed a bug submitted by b'vipinbihari' 
b'Bypassing the SMS sending limit for download app link.'

16 Apr 2019

b'Zomato' disclosed a bug submitted by b'vipinbihari' 
b'Sending Unlimited Emails to anyone from zomato mail server.'

16 Apr 2019

b'Razer US' disclosed a bug submitted by b'abdilahrf_' 
b'Jenkins instance exposed without authentication'

15 Apr 2019

1 ... 403 404 405 406 407 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM