Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Semmle' disclosed a bug submitted by b'kaushalag29' 
b'Unprotected Api EndPoints'

21 Mar 2019

b'BOHEMIA INTERACTIVE a.s.' disclosed a bug submitted by b'kryptomon' 
b'Clickjacking at ylands.com'

21 Mar 2019

b'Starbucks' disclosed a bug submitted by b'jtjisgod' 
b'Open Redirection in Login - Korean Starbucks'

20 Mar 2019

b'Semmle' disclosed a bug submitted by b'flamezzz' 
b'DOMXSS in redirect param'

20 Mar 2019

b'QIWI' disclosed a bug submitted by b'postboy' 
b'???????????? ????? ?????? ?????? ????? QVC (????????, ????? QVV ? QVP)'

20 Mar 2019

b'Twitter' disclosed a bug submitted by b'seifelsallamy' 
b'url that twitter mobile site can not load'

19 Mar 2019

b'Semmle' disclosed a bug submitted by b'drspitfire' 
b'Authenticated Cross-Site-Request-Forgery'

19 Mar 2019

b'Semmle' disclosed a bug submitted by b'0ufzayed' 
b'the login blocking mechanism does not work correctly'

19 Mar 2019

b'Zomato' disclosed a bug submitted by b'pasw' 
b'[www.zomato.com] Availing Zomato Gold membership for free by tampering plan id(s) '

18 Mar 2019

b'Zomato' disclosed a bug submitted by b'xsam' 
b' credentials leakage in public lead to view dev websites '

18 Mar 2019

b'Valve' disclosed a bug submitted by b'vinnievan' 
b'RCE on Steam Client via buffer overflow in Server Info'

15 Mar 2019

b'Inflection' disclosed a bug submitted by b'foobar7' 
b'Privilege Escalation: Read-Only to Admin'

15 Mar 2019

b'Grabtaxi Holdings Pte Ltd' disclosed a bug submitted by b'bagipro' 
b'[Grab Android/iOS] Insecure deeplink leads to sensitive information disclosure'

15 Mar 2019

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Unauthenticated blind SSRF in OAuth Jira authorization controller'

14 Mar 2019

b'Keybase' disclosed a bug submitted by b'jordanmilne' 
b'Persistent XSS on keybase.io via "payload" field in `/user/sigchain_signature.toffee` template'

14 Mar 2019

b'Shopify' disclosed a bug submitted by b'ruvlol' 
b'POST-based XSS on apps.shopify.com'

14 Mar 2019

b'Shopify' disclosed a bug submitted by b'ruvlol' 
b'Reverse Proxy misroute leading to steal X-Shopify-Access-Token header'

14 Mar 2019

b'Unikrn' disclosed a bug submitted by b'v4lid0l' 
b'????????? on CRM server without authorization'

14 Mar 2019

b'Ruby on Rails' disclosed a bug submitted by b'ooooooo_q' 
b'RCE which may occur due to `ActiveSupport::MessageVerifier` or `ActiveSupport::MessageEncryptor` (especially Active storage)'

13 Mar 2019

b'Vanilla' disclosed a bug submitted by b'mr_me' 
b'Vanilla Forums AddonManager getSingleIndex Directory Traversal File Inclusion Remote Code Execution Vulnerability'

13 Mar 2019

1 ... 423 424 425 426 427 ... 752

BY DENIS WERNER - @NOBBD - IMPRESSUM