Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Perl (IBB)' disclosed a bug submitted by b'etsukata' 
b'[CVE-2018-18312] regcomp: heap-buffer-overflow write / reg_node overrun'

25 Sep 2019

b'Twitter' disclosed a bug submitted by b'jackb898' 
b'XSS and Open Redirect on MoPub Login'

24 Sep 2019

b'Rockstar Games' disclosed a bug submitted by b'alexbirsan' 
b'The return of the ?'

24 Sep 2019

b'Brave Software' disclosed a bug submitted by b'ryotak' 
b'Stored XSS in localhost:* via integrated torrent downloader'

24 Sep 2019

b'OpenSSL (IBB)' disclosed a bug submitted by b'mirchr' 
b'Windows builds with insecure path defaults (CVE-2019-1552)'

24 Sep 2019

b'New Relic' disclosed a bug submitted by b'reformedot' 
b'Mixed content issues on newrelic.com'

23 Sep 2019

b'OLX' disclosed a bug submitted by b'f_m' 
b'web cache deception in https://tradus.com lead to name/user_id enumeration and other info'

22 Sep 2019

b'OLX' disclosed a bug submitted by b'littlestar' 
b'Reflected XSS on https://www.olx.co.id/iklan/*.html via "ad_type" parameter'

21 Sep 2019

b'Mail.ru' disclosed a bug submitted by b'the_predator' 
b'Disable 2FA via CSRF (Leads to 2FA Bypass)'

21 Sep 2019

b'ok.ru' disclosed a bug submitted by b'iframe' 
b'[insideok.ru] Remote Command Execution via file upload.'

20 Sep 2019

b'ICQ' disclosed a bug submitted by b'protex0r' 
b'Code Injection in macOS Desktop Client'

20 Sep 2019

b'PuTTY (European Commission - D' disclosed a bug submitted by b'niky1235' 
b'Heap overflow happen when receiving short length key from ssh server using ssh protocol 1'

20 Sep 2019

b'The Internet' disclosed a bug submitted by b'pwnsdx' 
b'Mailsploit: a sender spoofing bug in over 30 email clients'

19 Sep 2019

b'GitLab' disclosed a bug submitted by b'vijay_kumar1110' 
b'Add and Access to Labels of any Private Projects/Groups of Gitlab(IDOR)'

19 Sep 2019

b'Ubiquiti Inc.' disclosed a bug submitted by b'linkks' 
b'JetBrains .idea project directory'

19 Sep 2019

b'Zomato' disclosed a bug submitted by b'chajer' 
b'Information Disclosure through Sentry Instance ???????'

19 Sep 2019

b'OLX' disclosed a bug submitted by b'nullcod3r' 
b'Reflected XSS in www.olx.co.id'

19 Sep 2019

b'Twitter' disclosed a bug submitted by b'anshuman_pattnaik' 
b'AppLovin API Key hardcoded in a Github repo'

18 Sep 2019

b'Shopify' disclosed a bug submitted by b'eissen5c' 
b'Clickjacking in [exchangemarketplace.com]'

18 Sep 2019

b'VK.com' disclosed a bug submitted by b'linkks' 
b'Information Disclosure (phpinfo())'

18 Sep 2019

1 ... 406 407 408 409 410 ... 770

BY DENIS WERNER - @NOBBD - IMPRESSUM