Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.ru' disclosed a bug submitted by b'hudmi' 
b'[pandao.ru] ??????????? ???????? ?????????????? ???????? ??????'

05 Mar 2019

b'Homebrew' disclosed a bug submitted by b'pappan' 
b'Email enumeration of users'

05 Mar 2019

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Exfiltrate and mutate repository and project data through injected templated service'

05 Mar 2019

b'Unikrn' disclosed a bug submitted by b'noob-walid' 
b'ssh: unprivileged users may hijack due to backdated ssh version open port found(???.unikrn.com)'

04 Mar 2019

b"Hanno's projects" disclosed a bug submitted by b'anonym0us_py' 
b'Bypassing the fix of #503922'

04 Mar 2019

b'OLX' disclosed a bug submitted by b'paulochoupina' 
b'XSS - main page - search[user_id] parameter'

03 Mar 2019

b"Hanno's projects" disclosed a bug submitted by b'zophi' 
b'Open redirect on the https://tt.hboeck.de'

03 Mar 2019

b'GitLab' disclosed a bug submitted by b'jobert' 
b"Snippet JS template allows attacker to read a user's private snippets"

03 Mar 2019

b'Urban Dictionary' disclosed a bug submitted by b'red_assassin' 
b'Users able to set video url for unpublished words and able to see the name of unpublished words'

02 Mar 2019

b'Imgur' disclosed a bug submitted by b'giddsec' 
b'Stored XSS on imgur profile'

02 Mar 2019

b'Twitter' disclosed a bug submitted by b'mik317' 
b'CSRF on https://www.niche.co leads to "account disconnection"'

02 Mar 2019

b'Node.js third-party modules' disclosed a bug submitted by b'skyn3t' 
b'[glance] Access unlisted internal files/folders revealing sensitive information'

28 Feb 2019

b'Twitter' disclosed a bug submitted by b'healdb' 
b'Takeover of Twitter-owned domain at mobileapplinking.com'

28 Feb 2019

b'Twitter' disclosed a bug submitted by b'mik317' 
b'CSRF and probable account takeover on https://www.niche.co'

28 Feb 2019

b'Mavenlink' disclosed a bug submitted by b'tolo7010' 
b'User uploaded portfolio files can be accessed by any user even after deleted'

27 Feb 2019

b'Mavenlink' disclosed a bug submitted by b'tolo7010' 
b'CSRF Add user templates'

27 Feb 2019

b'Instacart' disclosed a bug submitted by b'tolo7010' 
b'CSRF Trial 14 days express subscription'

27 Feb 2019

b'Mail.ru' disclosed a bug submitted by b'bagipro' 
b'[Mail.Ru Android] Typo in permission name allows to write contacts without user knowledge'

26 Feb 2019

b'Postmates' disclosed a bug submitted by b'davidalbert' 
b'Web cache poisoning attack leads to user information and more'

26 Feb 2019

b'DuckDuckGo' disclosed a bug submitted by b'mik317' 
b'Partial bypass of #483774 with Blind XXE on https://duckduckgo.com'

25 Feb 2019

1 ... 411 412 413 414 415 ... 738

BY DENIS WERNER - @NOBBD - IMPRESSUM