Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'SQL injection on the https://????/'

04 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'SQL Injection in the get_publications.php on the https://?????'

04 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'[Critical] Full local fylesystem access (LFI/LFD) as admin via Path Traversal in the misconfigured Java servlet on the https://???/'

04 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'nahamsec' 
b'LFI with potential to RCE on ?????? using CVE-2019-3396'

04 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'sp1d3rs' 
b'[Critical] Possibility to takeover any user account #2 without interaction on the https://??????????'

04 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'deputy' 
b'?????? Authenticated User Data Disclosure'

04 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'warsong' 
b'https://????????? Vulnerable to CVE-2018-0296 Cisco ASA Path Traversal Authentication Bypass'

04 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'cdl' 
b'Root Remote Code Execution on https://???'

04 Oct 2019

b'Node.js third-party modules' disclosed a bug submitted by b'phra' 
b'Server Side JavaScript Code Injection'

03 Oct 2019

b'Ruby' disclosed a bug submitted by b'chrisseaton' 
b'Ruby is shipping a vulnerable jQuery'

03 Oct 2019

b'Railto LLC' disclosed a bug submitted by b'kira_deathnote' 
b'Administrator access to staging.railto.com'

03 Oct 2019

b'Twitter' disclosed a bug submitted by b'protostar0' 
b'login csrf in analytics.mopub.com'

02 Oct 2019

b'Twitter' disclosed a bug submitted by b'updatelap' 
b'Reports Modal in app.mopub.com Disclose by any user'

02 Oct 2019

b'GitLab' disclosed a bug submitted by b'petee' 
b'Privilege escalation due to insecure use of logrotate'

01 Oct 2019

b'TTS Bug Bounty' disclosed a bug submitted by b'manshum12' 
b'Stealing Users OAuth Tokens through redirect_uri parameter'

01 Oct 2019

b'Maker Ecosystem Growth Holding' disclosed a bug submitted by b'lucash-dev' 
b'Steal ALL collateral during liquidation by exploiting lack of validation in `flip.kick`'

01 Oct 2019

b'TomTom' disclosed a bug submitted by b'sbakhour' 
b'Anonymous user login to Nexus Repository Manager '

01 Oct 2019

b'ZEIT' disclosed a bug submitted by b'sbakhour' 
b'Stored XSS on Zeit.co user profile'

01 Oct 2019

b'GitLab' disclosed a bug submitted by b'abdilahrf_' 
b'Clientside resource Exhausting by exploiting gitlab math rendering '

01 Oct 2019

b'GitLab' disclosed a bug submitted by b'xanbanx' 
b'Bypassing push rules via MRs created by Email'

01 Oct 2019

1 ... 403 404 405 406 407 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM