Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[gamesventures.mail.ru] Publicly accessible GIT directory'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[sputnik.mail.ru] Publicly accessible GIT directory'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[hs.mail.ru] CRLF Injection / XSS'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[hs.mail.ru] XSS play_now.php'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[target.my.com] CRLF Injection -> XSS'

06 Nov 2018

b'Mail.Ru' disclosed a bug submitted by b'bobrov' 
b'[sj.my.com] Source Code Disclosure /.svn/wc.db'

06 Nov 2018

b'Rockstar Games' disclosed a bug submitted by b'coldd' 
b'stored XSS (angular injection) in support.rockstargames.com using zendesk register form via name parameter'

06 Nov 2018

b'Chaturbate' disclosed a bug submitted by b'glc' 
b'Stored XSS on chaturbate.com (wish list)'

06 Nov 2018

b'Chaturbate' disclosed a bug submitted by b'skavans' 
b'Passive stored XSS at broadcast room'

06 Nov 2018

b'Phabricator' disclosed a bug submitted by b'mishre' 
b'Exposing voting results on the Slowvote application without actually voting'

05 Nov 2018

b'Node.js third-party modules' disclosed a bug submitted by b'cris_semmle' 
b'Prototype Pollution Vulnerability in cached-path-relative Package'

02 Nov 2018

b'Node.js third-party modules' disclosed a bug submitted by b'abdilahrf_' 
b'[tianma-static] Stored xss on filename'

02 Nov 2018

b'Node.js third-party modules' disclosed a bug submitted by b'abdilahrf_' 
b'[takeapeek] Path traversal allow to expose directory and files'

02 Nov 2018

b'Node.js third-party modules' disclosed a bug submitted by b'abdilahrf_' 
b'[knightjs] Path Traversal allows to read content of arbitrary files'

02 Nov 2018

b'Starbucks' disclosed a bug submitted by b'k3m' 
b'Unauthorized access to a system used for CI/CD processes'

01 Nov 2018

b'TTS Bug Bounty' disclosed a bug submitted by b'albinowax' 
b'Defacement of catalog.data.gov via web cache poisoning to stored DOMXSS'

01 Nov 2018

b'Chaturbate' disclosed a bug submitted by b'avlidienbrunn' 
b'Stored XSS in chat topic due to insecure emoticon parsing on any message type'

01 Nov 2018

b'Twitter' disclosed a bug submitted by b'bobrov' 
b'[staging-engineering.gnip.com] Publicly accessible GIT directory'

01 Nov 2018

b'TTS Bug Bounty' disclosed a bug submitted by b'bobrov' 
b'[idp.fr.cloud.gov] Open Redirect'

01 Nov 2018

b'Badoo' disclosed a bug submitted by b'jarvis7' 
b'??????????? ???? ????? ??????????? ID'

01 Nov 2018

1 ... 419 420 421 422 423 ... 729

BY DENIS WERNER - @NOBBD - IMPRESSUM