Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'PHP (IBB)' disclosed a bug submitted by b'aerodudrizzt' 
b'Crash (DoS) when parsing a hostile TIFF'

13 Oct 2019

b'Python (IBB)' disclosed a bug submitted by b'aerodudrizzt' 
b'Information disclosure in mmap module - python 2.7.12'

13 Oct 2019

b'WordPress' disclosed a bug submitted by b'yzy9951' 
b'[FG-VD-18-165] Wordpress Cross-Site Scripting Vulnerability Notification II'

11 Oct 2019

b'HackerOne' disclosed a bug submitted by b'kunal94' 
b'Disclosure of Email title report in quick award paypout email (no content mode)'

11 Oct 2019

b'Shopify' disclosed a bug submitted by b'dostoevskylabs' 
b'Reflective Cross-site Scripting via Newsletter Form'

11 Oct 2019

b'SEMrush' disclosed a bug submitted by b'r0hack' 
b'Manipulation of exam results at Semrush.Academy'

11 Oct 2019

b'Mail.ru' disclosed a bug submitted by b'johndoe1492' 
b'OOB XXE '

11 Oct 2019

b'Mail.ru' disclosed a bug submitted by b'johndoe1492' 
b'OOB XXE '

11 Oct 2019

b'Mail.ru' disclosed a bug submitted by b'mase289' 
b'XSS via Cookie in Mail.ru'

11 Oct 2019

b'Mail.ru' disclosed a bug submitted by b'kiriknik' 
b'Blind SSRF on sentry.dev-my.com due to Sentry misconfiguration'

11 Oct 2019

b'Mail.ru' disclosed a bug submitted by b'iframe' 
b'[agent.33slona.ru] Recovery code bruteforce'

11 Oct 2019

b'Mail.ru' disclosed a bug submitted by b'iframe' 
b'[sso.33slona.ru] Application Messages Error stacktrace PHP.'

11 Oct 2019

b'QIWI' disclosed a bug submitted by b'circuit' 
b'account takeover https://qiwi.me '

11 Oct 2019

b'Shopify' disclosed a bug submitted by b'mariogh' 
b'Bypass report #416983 - Removed Staff members who had "Apps" permission can still modify flow app connections'

10 Oct 2019

b'Shopify' disclosed a bug submitted by b'mariogh' 
b'Unauthenticated read and write access to ALL endpoints of a store is possible for removed staff members who had "Apps" permission'

10 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera' 
b'PII leakage-Full SSN on ???'

10 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'alyssa_herrera' 
b'Partial SSN exposed through Presentation slides on ??????????'

10 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'ragnar' 
b'MSSQL injection via param Customwho in https://?????/News/Transcripts/Search/Sort/ and WAF bypass'

10 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'warsong' 
b'RCE on https://?????/ Using CVE-2017-9248'

10 Oct 2019

b'U.S. Dept Of Defense' disclosed a bug submitted by b'mason357' 
b'Examples directory is PUBLIC on https://????????mil, leading to multiple vulns'

10 Oct 2019

1 ... 405 406 407 408 409 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM