Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'japz' 
b'[Bypass #645264] Report title disclosure despite the program settings for email notification is set to "No Content"'

09 Sep 2019

b'Trint Ltd' disclosed a bug submitted by b'xh3n1' 
b'Insecure Zendesk SSO implementation by generating JWT client-side'

08 Sep 2019

b'HackerOne' disclosed a bug submitted by b'jobert' 
b'IDOR in Report CSV export discloses the IDs of Custom Field Attributes of Programs'

06 Sep 2019

b'HackerOne' disclosed a bug submitted by b'hisokamorou' 
b'Disclosure of Program email Title Report when being removed as contributor. Bypass for Report #645264'

06 Sep 2019

b'Kaspersky' disclosed a bug submitted by b'palant' 
b'MitM attacks on HSTS-protected hosts are possible'

05 Sep 2019

b'Nextcloud' disclosed a bug submitted by b'pamper' 
b'Content Spoofing /Text Injection in https://docs.nextcloud.com'

05 Sep 2019

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'NULL pointer dereference in `mrb_check_frozen`'

04 Sep 2019

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Buffer overflow in yywarning_s'

04 Sep 2019

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Invalid read in `str_replace_partial`'

04 Sep 2019

b'shopify-scripts' disclosed a bug submitted by b'dgaletic' 
b'Crash in mrb_ary_push'

04 Sep 2019

b'Omise' disclosed a bug submitted by b'sheerwood' 
b'Email enumeration at SignUp page'

04 Sep 2019

b'Twitter' disclosed a bug submitted by b'faceless_man' 
b'Html Injection and Possible XSS via MathML'

03 Sep 2019

b'Imgur' disclosed a bug submitted by b'madrobot' 
b'Xss on community.imgur.com'

03 Sep 2019

b'Razer US' disclosed a bug submitted by b'yehtut_yehg' 
b'Synapse 2.21 - DLL Hijacking vulnerability'

03 Sep 2019

b'Blockstack' disclosed a bug submitted by b'the_predator' 
b'EXIF Geolocation Data Not Stripped From Uploaded Images'

03 Sep 2019

b'Nextcloud' disclosed a bug submitted by b'phil-davis' 
b'Delete permission can be added on reshare'

03 Sep 2019

b'Node.js third-party modules' disclosed a bug submitted by b'inkz' 
b'[larvitbase-www] Unintended Require'

03 Sep 2019

b'Node.js third-party modules' disclosed a bug submitted by b'mcollina' 
b'environment variable leakage in error reporting'

03 Sep 2019

b'WakaTime' disclosed a bug submitted by b'jatingupta' 
b'Vulnerability Name: Host Header Injection Redirect'

02 Sep 2019

b'GitLab' disclosed a bug submitted by b'ryhmnlfj' 
b'Stored XSS in Wiki pages'

02 Sep 2019

1 ... 412 413 414 415 416 ... 773

BY DENIS WERNER - @NOBBD - IMPRESSUM