Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'New Relic' disclosed a bug submitted by b'ajxchapman' 
b'Blind SSRF in Ticketing Integrations Jira webhooks leading to internal network enumeration and blind HTTP requests'

02 Jul 2019

b'ZEIT' disclosed a bug submitted by b'elcaesar' 
b'Open redirection in https://zeit.co/login?next='

02 Jul 2019

b'Weblate' disclosed a bug submitted by b'lgian' 
b'Stored XSS @ /engage/<project_slug>'

02 Jul 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'erbbysam' 
b'RCE on ????? via CVE-2017-10271'

01 Jul 2019

b'ownCloud' disclosed a bug submitted by b'q3rv0' 
b'Remote Code Execution through Deserialization Attack in OwnBackup app.'

01 Jul 2019

b'Nextcloud' disclosed a bug submitted by b'enz0' 
b'Click Jacking Nextcloud'

01 Jul 2019

b'Nextcloud' disclosed a bug submitted by b'abay' 
b'Wordpress Users Disclosure'

01 Jul 2019

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t' 
b'[takeapeek] XSS via HTML tag injection in directory lisiting page'

01 Jul 2019

b'curl' disclosed a bug submitted by b'mirchr' 
b'Windows Privilege Escalation: Malicious OpenSSL Engine'

29 Jun 2019

b'ICQ' disclosed a bug submitted by b'n4sty' 
b'Stored xss on message reply'

29 Jun 2019

b'ICQ' disclosed a bug submitted by b'n4sty' 
b'[web.icq.com] Stored XSS in "? ????????"'

29 Jun 2019

b'Slack' disclosed a bug submitted by b'hanno' 
b'Invitation reminder emails contain insecure links'

29 Jun 2019

b'HackerOne' disclosed a bug submitted by b'haxta4ok00' 
b'Disclosing a private program in an external link if program is paused'

28 Jun 2019

b'Omise' disclosed a bug submitted by b'honoki' 
b'SSRF in webhooks leads to AWS private keys disclosure'

28 Jun 2019

b'Shopify' disclosed a bug submitted by b'mosuan' 
b'Stored XSS in Discounts section'

27 Jun 2019

b'Nextcloud' disclosed a bug submitted by b'frr' 
b'Expired reshare links allow access to all files in share'

27 Jun 2019

b'TomTom' disclosed a bug submitted by b'vijay922' 
b'Apache mod_status /server-status Information Disclosure'

27 Jun 2019

b'Nextcloud' disclosed a bug submitted by b'sjw' 
b'Stored XSS/HTML injection in autocomplete suggestions for sharing'

27 Jun 2019

b'Nextcloud' disclosed a bug submitted by b'fancycode' 
b'Uploading large avatar images cause excessive CPU usage'

27 Jun 2019

b'Nextcloud' disclosed a bug submitted by b'nickvergessen' 
b'Private/confidential setting of calendar events is ignored on activity stream'

27 Jun 2019

1 ... 404 405 406 407 408 ... 751

BY DENIS WERNER - @NOBBD - IMPRESSUM