Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'The Internet' disclosed a bug submitted by b'xairy' 
b'Linux kernel: CVE-2017-6074: DCCP double-free vulnerability'

27 Aug 2019

b'MyEtherWallet' disclosed a bug submitted by b'tw96' 
b'Local Storage Custom Node Credentials Leak'

27 Aug 2019

b'MyEtherWallet' disclosed a bug submitted by b'tw96' 
b'Malicious Node JavaScript Injection Leading to Theft of Private Keys and User Funds'

27 Aug 2019

b'New Relic' disclosed a bug submitted by b'sauravpratihar' 
b'Swiftype key stored in JavaScript source'

27 Aug 2019

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'Passcode Protection in Android Devices Can be Bypassed.'

27 Aug 2019

b'TTS Bug Bounty' disclosed a bug submitted by b'niwasaki' 
b'SSRF in Search.gov via ?url= parameter'

26 Aug 2019

b'TTS Bug Bounty' disclosed a bug submitted by b'zephrfish' 
b'Subdomain Takeover due to unclaimed domain pointing to AWS'

26 Aug 2019

b'Twitter' disclosed a bug submitted by b'mr_edwards' 
b'Wrong Interpretation of URL encoded characters, showing different punny code leads to redirection on different domain'

26 Aug 2019

b'WordPress' disclosed a bug submitted by b'gnux' 
b"Reflected XSS on https://make.wordpress.org via 'channel' parameter"

26 Aug 2019

b'Notepad++' disclosed a bug submitted by b'ammm' 
b'Stack overflow affecting "ext" field on stylers.xml configuration file'

25 Aug 2019

b'Notepad++' disclosed a bug submitted by b'ammm' 
b'Stack overflow in XML Parsing'

25 Aug 2019

b'Node.js third-party modules' disclosed a bug submitted by b'toannc123' 
b'[statichttpserver] List any file in the folder by using path traversal.'

25 Aug 2019

b'Khan Academy' disclosed a bug submitted by b'katsuragicsl' 
b'Subdomain takeover on healthyhackathon.khanacademy.org and hackweek.khanacademy.org'

25 Aug 2019

b'ICQ' disclosed a bug submitted by b'superboyxxx' 
b'web.icq.com XSS in chat message via contact info'

24 Aug 2019

b'Vimeo' disclosed a bug submitted by b'dphoeniixx' 
b'Reflected File Download (RFD) in download video'

23 Aug 2019

b'Ubiquiti Networks' disclosed a bug submitted by b'smartnoob' 
b'Catch mails sent to an SMTP Server over SSL using an Evil SMTP Server'

22 Aug 2019

b'Equifax' disclosed a bug submitted by b'mohanaddobal' 
b'Important information leaked on Github'

22 Aug 2019

b'GitLab' disclosed a bug submitted by b'8ayac' 
b'All functions that allow users to specify color code are vulnerable to ReDoS'

21 Aug 2019

b'Trustpilot' disclosed a bug submitted by b'qwerty01' 
b'IDOR in sending support email upon Verifying user business domain'

21 Aug 2019

b'OLX' disclosed a bug submitted by b'nullcod3r' 
b'SQL Injection on https://www.olx.co.id'

20 Aug 2019

1 ... 414 415 416 417 418 ... 772

BY DENIS WERNER - @NOBBD - IMPRESSUM